profile.d/{01gnupg,01seccure}: Distinct secrecy/integrity sections.

So that they actually include the correct ACLs.

diff --git a/profile.d/01gnupg b/profile.d/01gnupg
index 182769cafcacf986de7a70a49ce71be28235ce7e..1f897b59f7d476dea55fcd4b1e7c3b95b14b332b 100644 (file)
--- a/profile.d/01gnupg
+++ b/profile.d/01gnupg
@@ -100,8 +100,11 @@ realname = %{realname}
 comment = %{comment-nil}
 email = %{email}
 
-[gnupg]
-@include = %gnupg %asymmetric
+[gnupg-integrity]
+@include = %gnupg %asymmetric-integrity
+
+[gnupg-secrecy]
+@include = %gnupg %asymmetric-secrecy
 
 [%gnupg-infra]
 @include = %gnupg

diff --git a/profile.d/01seccure b/profile.d/01seccure
index 79d9e2a4823e8eeaa4da05884aefb0d6244ac23d..3e7776249f95f720d32f65467f1d2dd75c1e1223 100644 (file)
--- a/profile.d/01seccure
+++ b/profile.d/01seccure
@@ -48,8 +48,11 @@ curve = p256
 ;; MAC tag length.
 tagsz = 128
 
-[seccure]
-@include = %seccure %asymmetric
+[seccure-integrity]
+@include = %seccure %asymmetric-integrity
+
+[seccure-secrecy]
+@include = %seccure %asymmetric-secrecy
 
 [%seccure-infra]
 @include = %seccure