/usr/share/igtf-policy/slcs/FNAL-SLCS.signing_policy is in igtf-policy-slcs 1.71-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 | # @(#)$Id: 99f9f5a3.signing_policy,v 1.1 2009/05/30 12:31:46 pmacvsdg Exp $
# FNAL-SLCS
access_id_CA X509 '/DC=gov/DC=fnal/O=Fermilab/OU=Certificate Authorities/CN=Kerberized CA HSM'
pos_rights globus CA:sign
cond_subjects globus '"/DC=gov/DC=fnal/O=Fermilab/OU=Certificate Authorities/CN=Kerberized CA HSM" "/DC=gov/DC=fnal/O=Fermilab/OU=People/*" "/DC=gov/DC=fnal/O=Fermilab/OU=Robots/*"'
|