diff --git a/kbs/quickstart.md b/kbs/quickstart.md index a69d88a475..45f613d10f 100644 --- a/kbs/quickstart.md +++ b/kbs/quickstart.md @@ -103,7 +103,7 @@ To test the KBS with sample evidence, you'll need to update the resource policy to something more permissive. This can be done with a command such as ```shell -./kbs-client --url http://127.0.0.1:8080 config --auth-private-key config/private.key set-resource-policy --policy-file allow_all.rego +kbs-client --url http://127.0.0.1:8080 config --auth-private-key config/private.key set-resource-policy --policy-file sample_policies/allow_all.rego ``` ## Passport Mode diff --git a/kbs/sample_policies/README.md b/kbs/sample_policies/README.md new file mode 100644 index 0000000000..12527f6312 --- /dev/null +++ b/kbs/sample_policies/README.md @@ -0,0 +1,6 @@ +This directory contains sample policy files to configure the policy engine +of the KBS. You can use these files to write your own policies. + +| File | Description | +| --- | --- | +|[allow_all.rego](./allow_all.rego)|Equivalent to turning off the policy engine. Release resources unconditionally| \ No newline at end of file diff --git a/kbs/sample_policies/allow_all.rego b/kbs/sample_policies/allow_all.rego new file mode 100644 index 0000000000..2a379fc370 --- /dev/null +++ b/kbs/sample_policies/allow_all.rego @@ -0,0 +1,5 @@ + +package policy + +default allow = true +