profile.d/{01gnupg,01seccure}: Distinct secrecy/integrity sections.

So that they actually include the correct ACLs.

diff --git a/profile.d/01gnupg b/profile.d/01gnupg
index 182769c..1f897b5 100644 (file)
--- a/profile.d/01gnupg
+++ b/profile.d/01gnupg
@@ -100,8 +100,11 @@ realname = %{realname}
 comment = %{comment-nil}
 email = %{email}
 
-[gnupg]
-@include = %gnupg %asymmetric
+[gnupg-integrity]
+@include = %gnupg %asymmetric-integrity
+
+[gnupg-secrecy]
+@include = %gnupg %asymmetric-secrecy
 
 [%gnupg-infra]
 @include = %gnupg

diff --git a/profile.d/01seccure b/profile.d/01seccure
index 79d9e2a..3e77762 100644 (file)
--- a/profile.d/01seccure
+++ b/profile.d/01seccure
@@ -48,8 +48,11 @@ curve = p256
 ;; MAC tag length.
 tagsz = 128
 
-[seccure]
-@include = %seccure %asymmetric
+[seccure-integrity]
+@include = %seccure %asymmetric-integrity
+
+[seccure-secrecy]
+@include = %seccure %asymmetric-secrecy
 
 [%seccure-infra]
 @include = %seccure