This file is indexed.

/usr/share/igtf-policy/classic/CERN-Root.namespaces is in igtf-policy-classic 1.59-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
##############################################################################
#NAMESPACES-VERSION: 1.0
#
# @(#)d254cc30.signing_policy.namespaces
# CA alias    : CERN-Root
#    subord_of: 
#    subjectDN: /DC=ch/DC=cern/CN=CERN Root CA
#    hash     : d254cc30.signing_policy
#    (generated automatically from d254cc30.signing_policy)
#
TO Issuer "/DC=ch/DC=cern/CN=CERN Root CA" \
  PERMIT Subject "/DC=ch/DC=cern/CN=CERN Trusted Certification Authority"

TO Issuer "/DC=ch/DC=cern/CN=CERN Trusted Certification Authority" \
  PERMIT Subject "/DC=ch/DC=cern/.*"