From 34457442f32a9bc5e968caebdfa8fce4c3f31b7b Mon Sep 17 00:00:00 2001
From: Robert Sturla <robertsturla@outlook.com>
Date: Tue, 17 Oct 2023 23:32:06 +0100
Subject: [PATCH] Default the policy to insecureAcceptAnything except specific
 registries

---
 files/usr/etc/containers/policy.json | 42 +---------------------------
 1 file changed, 1 insertion(+), 41 deletions(-)

diff --git a/files/usr/etc/containers/policy.json b/files/usr/etc/containers/policy.json
index b1d3296f..de0300f8 100644
--- a/files/usr/etc/containers/policy.json
+++ b/files/usr/etc/containers/policy.json
@@ -1,7 +1,7 @@
 {
   "default": [
       {
-          "type": "reject"
+          "type": "insecureAcceptAnything"
       }
   ],
   "transports": {
@@ -28,46 +28,6 @@
                       "type": "matchRepository"
                   }
               }
-          ],
-          "": [
-              {
-                  "type": "insecureAcceptAnything"
-              }
-          ]
-      },
-      "docker-daemon": {
-          "": [
-              {
-                  "type": "insecureAcceptAnything"
-              }
-          ]
-      },
-      "atomic": {
-          "": [
-              {
-                  "type": "insecureAcceptAnything"
-              }
-          ]
-      },
-      "dir": {
-          "": [
-              {
-                  "type": "insecureAcceptAnything"
-              }
-          ]
-      },
-      "oci": {
-          "": [
-              {
-                  "type": "insecureAcceptAnything"
-              }
-          ]
-      },
-      "tarball": {
-          "": [
-              {
-                  "type": "insecureAcceptAnything"
-              }
           ]
       }
   }