/usr/share/igtf-policy/classic/bd43b60c.signing_policy is in igtf-policy-classic 1.79-1.
This file is owned by root:root, with mode 0o777.
It is a symlink to /usr/share/igtf-policy/classic/DigiCertGridTrustCAG2-Classic.signing_policy