====== Fedora XACML ======


Add policy for getDatastreamHistory unrestricted.
<WRAP prewrap center>
<code>
git clone https://github.com/Islandora/islandora-xacml-policies.git islandora-xacml-policies

mkdir /usr/local/fedora//data/fedora-xacml-policies/repository-policies/islandora
cp islandora-xacml-policies/permit-getDatastreamHistory-unrestricted.xml /usr/local/fedora/data/fedora-xacml-policies/repository-policies/islandora/
chown -R tomcat7:tomcat7  /usr/local/fedora//data/fedora-xacml-policies/repository-policies/islandora
</code>
</WRAP>
\\
\\
Add back-end and front-end IP to apim policy:
<WRAP prewrap center>
<code>
nano -w /usr/local/fedora/data/fedora-xacml-policies/repository-policies/default/deny-apim-if-not-localhost.xml
</code>
</WRAP>
<WRAP prewrap center>
<code xml>
	<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">150.145.48.37</AttributeValue>
	<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">2a00:1620:0:0:0:0:0:37</AttributeValue>
	<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">150.145.48.38</AttributeValue>
	<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">2a00:1620:0:0:0:0:0:38</AttributeValue>
</code>
</WRAP>
\\
\\
<WRAP prewrap center>
<code>
service tomcat7 restart
</code>
</WRAP>