From f5d9df89acb10f74ddafc820fa2879a31cc9622a Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <patrick@puiterwijk.org>
Date: Wed, 10 Jun 2020 09:29:50 +0200
Subject: [PATCH] Allow robosignatory to use systemd-ask-password

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
---
 roles/robosignatory/tasks/main.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/roles/robosignatory/tasks/main.yml b/roles/robosignatory/tasks/main.yml
index 17e18ab93d..e0524751f7 100644
--- a/roles/robosignatory/tasks/main.yml
+++ b/roles/robosignatory/tasks/main.yml
@@ -190,3 +190,14 @@
   tags:
   - config
   - robosignatory
+
+- name: Allow robosignatory to use systemd-ask-password
+  acl:
+    path: /run/systemd/ask-password
+    entity: robosignatory
+    etype: user
+    permissions: rwx
+    state: present
+  tags:
+  - config
+  - robosignatory