tree 2454e5627eae235d99cd2d247bcf74409abade13
parent 0dde5049ee6c49a34f47dbdc483182383bae00f5
author Václav Kubernát <kubernat@cesnet.cz> 1612900424 +0100
committer Václav Kubernát <kubernat@cesnet.cz> 1613668700 +0100

Add NACM rules

NACM completely bypasses sysrepo permissions, so some rules need to be
set up. Now that the default shell for non-root users is netconf-cli, we
can completely forget about the sysrepo permissions, and only focus on
NACM. The default configuration for everyone is to allow reading and
disallow writing of everything. This patch changes this to allow root to
do anything and also allow the dwdm user to manipulate a subset of
installed modules.

Change-Id: Ifbb18957ba8a692b4a34ba37dba666b60819a2e6