Default the policy to insecureAcceptAnything except specific registries

rsturla · Oct 17, 2023 · 3445744 · 3445744
1 parent 68442c0
commit 3445744
Showing 1 changed file with 1 addition and 41 deletions.
diff --git a/files/usr/etc/containers/policy.json b/files/usr/etc/containers/policy.json
@@ -1,7 +1,7 @@
 {
   "default": [
       {
-          "type": "reject"
+          "type": "insecureAcceptAnything"
       }
   ],
   "transports": {
@@ -28,46 +28,6 @@
                       "type": "matchRepository"
                   }
               }
-          ],
-          "": [
-              {
-                  "type": "insecureAcceptAnything"
-              }
-          ]
-      },
-      "docker-daemon": {
-          "": [
-              {
-                  "type": "insecureAcceptAnything"
-              }
-          ]
-      },
-      "atomic": {
-          "": [
-              {
-                  "type": "insecureAcceptAnything"
-              }
-          ]
-      },
-      "dir": {
-          "": [
-              {
-                  "type": "insecureAcceptAnything"
-              }
-          ]
-      },
-      "oci": {
-          "": [
-              {
-                  "type": "insecureAcceptAnything"
-              }
-          ]
-      },
-      "tarball": {
-          "": [
-              {
-                  "type": "insecureAcceptAnything"
-              }
           ]
       }
   }