From: Mark Wooding <mdw@distorted.org.uk>
Date: Sun, 12 Feb 2012 23:07:24 +0000 (+0000)
Subject: profile.d/{01gnupg,01seccure}: Distinct secrecy/integrity sections.
X-Git-Tag: 0.99.2~35
X-Git-Url: https://git.distorted.org.uk/~mdw/distorted-keys/commitdiff_plain/600916867dd4f7e6129f8c1ebbc84134fbf9f9f2

profile.d/{01gnupg,01seccure}: Distinct secrecy/integrity sections.

So that they actually include the correct ACLs.
---

diff --git a/profile.d/01gnupg b/profile.d/01gnupg
index 182769c..1f897b5 100644
--- a/profile.d/01gnupg
+++ b/profile.d/01gnupg
@@ -100,8 +100,11 @@ realname = %{realname}
 comment = %{comment-nil}
 email = %{email}
 
-[gnupg]
-@include = %gnupg %asymmetric
+[gnupg-integrity]
+@include = %gnupg %asymmetric-integrity
+
+[gnupg-secrecy]
+@include = %gnupg %asymmetric-secrecy
 
 [%gnupg-infra]
 @include = %gnupg
diff --git a/profile.d/01seccure b/profile.d/01seccure
index 79d9e2a..3e77762 100644
--- a/profile.d/01seccure
+++ b/profile.d/01seccure
@@ -48,8 +48,11 @@ curve = p256
 ;; MAC tag length.
 tagsz = 128
 
-[seccure]
-@include = %seccure %asymmetric
+[seccure-integrity]
+@include = %seccure %asymmetric-integrity
+
+[seccure-secrecy]
+@include = %seccure %asymmetric-secrecy
 
 [%seccure-infra]
 @include = %seccure