/usr/share/igtf-policy/classic/CERN-Root-2.signing_policy is in igtf-policy-classic 1.79-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 | # @(#)$Id: b4278411.signing_policy,v 1.2 2016/01/27 17:00:22 pmacvsdg Exp $
# CERN Root 2
access_id_CA X509 '/C=ch/O=CERN/CN=CERN Root Certification Authority 2'
pos_rights globus CA:sign
cond_subjects globus '"/DC=ch/DC=cern/CN=CERN Grid Certification Authority" "/DC=ch/DC=cern/CN=CERN LCG IOTA Certification Authority"'
|