Add sys/renew to default policy

This commit is contained in:
Jeff Mitchell 2016-08-08 17:32:30 -04:00
parent 031437a98f
commit 5e9d7e2c8f

View file

@ -300,6 +300,10 @@ path "cubbyhole" {
path "sys/capabilities-self" {
capabilities = ["update"]
}
path "sys/renew/*" {
capabilities = ["update"]
}
`)
if err != nil {
return errwrap.Wrapf("error parsing default policy: {{err}}", err)