profile.d/{01gnupg,01seccure}: Distinct secrecy/integrity sections.

[distorted-keys] / profile.d / 01seccure

diff --git a/profile.d/01seccure b/profile.d/01seccure
index 79d9e2a4823e8eeaa4da05884aefb0d6244ac23d..3e7776249f95f720d32f65467f1d2dd75c1e1223 100644 (file)
--- a/profile.d/01seccure
+++ b/profile.d/01seccure
@@ -48,8 +48,11 @@ curve = p256
 ;; MAC tag length.
 tagsz = 128
 
-[seccure]
-@include = %seccure %asymmetric
+[seccure-integrity]
+@include = %seccure %asymmetric-integrity
+
+[seccure-secrecy]
+@include = %seccure %asymmetric-secrecy
 
 [%seccure-infra]
 @include = %seccure