From 8c6291c915bd9f806600642b188f2bbb5fc716bc Mon Sep 17 00:00:00 2001
From: asteroide <thomas.duval@orange.com>
Date: Fri, 22 Apr 2016 16:06:08 +0200
Subject: Move policy files to a better location for the installation process.

Change-Id: If74a878058983df8e432927e87b3da69214d9888
---
 keystone-moon/etc/policies/policy_authz/rule.json | 25 +++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 keystone-moon/etc/policies/policy_authz/rule.json

(limited to 'keystone-moon/etc/policies/policy_authz/rule.json')

diff --git a/keystone-moon/etc/policies/policy_authz/rule.json b/keystone-moon/etc/policies/policy_authz/rule.json
new file mode 100644
index 00000000..25f9d93a
--- /dev/null
+++ b/keystone-moon/etc/policies/policy_authz/rule.json
@@ -0,0 +1,25 @@
+{
+	"mls_rule":[
+		["high", "vm_admin", "medium"],
+		["high", "vm_admin", "low"],
+		["medium", "vm_admin", "low"],
+		["high", "vm_access", "high"],
+		["high", "vm_access", "medium"],
+		["high", "vm_access", "low"],
+		["medium", "vm_access", "medium"],
+		["medium", "vm_access", "low"],
+		["low", "vm_access", "low"]
+	],
+	"dte_rule":[
+		["ft", "read", "computing"],
+		["ft", "write", "computing"],
+		["ft", "read", "storage"],
+		["ft", "write", "storage"],
+		["xx", "read", "storage"]
+	],
+	"rbac_rule":[
+		["dev", "xx", "read", "servers"],
+		["admin", "xx", "read", "servers"],
+		["admin", "ft", "read", "servers"]
+	]
+}
-- 
cgit 1.2.3-korg