Skip to content

Commit

Permalink
Use 50-* policy files for salt-managed policy
Browse files Browse the repository at this point in the history
Make it conform to the convention set in qrexec documentation.

And also use new policy location for included admin api policy.

QubesOS/qubes-issues#4370
  • Loading branch information
marmarek committed May 21, 2020
1 parent b372958 commit d0f18bc
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions qvm/sys-audio.sls
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ service:
# as sys-gui is a admin-global-rwx
sys-audio-rpc:
file.managed:
- name: /etc/qubes/policy.d/30-sys-audio.policy
- name: /etc/qubes/policy.d/50-sys-audio.policy
- contents: |
admin.Events * sys-audio sys-audio allow target=dom0
admin.Events * sys-audio @adminvm allow target=dom0
Expand Down Expand Up @@ -66,7 +66,7 @@ sys-audio-rpc:
# - sls: qvm.sys-gui

# AudioVM (AdminVM) with local 'ro' permissions
/etc/qubes-rpc/policy/include/admin-local-ro:
/etc/qubes/policy.d/include/admin-local-ro:
file.append:
- text: |
{{ vmname }} @tag:audiovm-{{ vmname }} allow,target=dom0
Expand Down

0 comments on commit d0f18bc

Please sign in to comment.