/usr/share/igtf-policy/classic/UKeScienceRoot-2007.signing_policy is in igtf-policy-classic 1.79-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 | # @(#)$Id: 98ef0ee5.signing_policy,v 1.3 2013/01/21 10:13:18 pmacvsdg Exp $
access_id_CA X509 '/C=UK/O=eScienceRoot/OU=Authority/CN=UK e-Science Root'
pos_rights globus CA:sign
cond_subjects globus '"/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2A" "/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B"'
# Uncomment the following instead, to enable the SLCS branches:
# cond_subjects globus '"/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2A" "/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B" "/C=UK/O=eScienceSLCSHierarchy/OU=Authority/CN=SLCS Top Level CA"'
|