Allow robosignatory to use systemd-ask-password

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-06-10 09:29:50 +02:00 · 2020-06-10 09:29:50 +02:00 · f5d9df89ac
commit f5d9df89ac
parent 5628b8d2a5
1 changed files with 11 additions and 0 deletions
--- a/roles/robosignatory/tasks/main.yml
+++ b/roles/robosignatory/tasks/main.yml
@ -190,3 +190,14 @@
  tags:
  - config
  - robosignatory
+
+- name: Allow robosignatory to use systemd-ask-password
+  acl:
+    path: /run/systemd/ask-password
+    entity: robosignatory
+    etype: user
+    permissions: rwx
+    state: present
+  tags:
+  - config
+  - robosignatory