profile.d/00base: Make key information public for public keys.
[distorted-keys] / profile.d / 00base
index 09ac56b..662681d 100644 (file)
@@ -188,7 +188,7 @@ nubid-hash = sha256
 ;;;                    of the key nub should be made.  The default is to
 ;;;                    make no recovery copies, because this configuration
 ;;;                    has no idea which recovery key to use; however, I
-;;;                    /stongly/ recommend that all user keys used for
+;;;                    /strongly/ recommend that all user keys used for
 ;;;                    secrecy be recoverable.
 
 [%common]
@@ -211,6 +211,7 @@ acl-%public = $acl-%private
 [%asymmetric]
 @include = %common
 acl-%public = *
+acl-info = $acl-%public
 
 [%secrecy]
 @include = %common
@@ -223,13 +224,13 @@ acl-sign = $acl-%private
 acl-verify = $acl-%public
 
 [%asymmetric-secrecy]
-@include = %asymmetric %integrity
+@include = %asymmetric %secrecy
 
 [%asymmetric-integrity]
 @include = %asymmetric %integrity
 
 [%symmetric-secrecy]
-@include = %symmetric %integrity
+@include = %symmetric %secrecy
 
 [%symmetric-integrity]
 @include = %symmetric %integrity