Supply service & busconfig ACLs from the repo.
This change required as a part of privilege separation work:
https://github.com/openbmc/openbmc/issues/3383
This change required by the following openbmc meta change:
https://gerrit.openbmc-project.xyz/c/openbmc/openbmc/+/42672
Signed-off-by: Anton D. Kachalov <gmouse@google.com>
Change-Id: Iad476fc32f9df6fe5ceb51e8eea2c798dcc51252
diff --git a/phosphor-nslcd-cert-config.conf b/phosphor-nslcd-cert-config.conf
new file mode 100644
index 0000000..6e8d9f5
--- /dev/null
+++ b/phosphor-nslcd-cert-config.conf
@@ -0,0 +1,8 @@
+<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+ <policy user="root">
+ <allow own="xyz.openbmc_project.Certs.Manager.Client.Ldap"/>
+ <allow send_destination="xyz.openbmc_project.Certs.Manager.Client.Ldap"/>
+ </policy>
+</busconfig>