Rescope clipboard permission to sd-app

Author: eloquence

dom0/sd-dom0-qvm-rpc.sls

@@ -17,8 +17,8 @@ dom0-rpc-qubes.ClipboardPaste:
     - marker_start: "### BEGIN securedrop-workstation ###"
     - marker_end: "### END securedrop-workstation ###"
     - content: |
-        @tag:sd-send-clipboard @tag:sd-workstation ask
-        @tag:sd-workstation @tag:sd-receive-clipboard ask
+        @tag:sd-send-app-clipboard sd-app ask
+        sd-app @tag:sd-receive-app-clipboard ask
         @anyvm @tag:sd-workstation deny
         @tag:sd-workstation @anyvm deny
 dom0-rpc-qubes.FeaturesRequest:

tests/vars/qubes-rpc.yml

@@ -1,8 +1,8 @@
 - policy: qubes.ClipboardPaste
   starts_with: |-
     ### BEGIN securedrop-workstation ###
-    @tag:sd-send-clipboard @tag:sd-workstation ask
-    @tag:sd-workstation @tag:sd-receive-clipboard ask
+    @tag:sd-send-app-clipboard sd-app ask
+    sd-app @tag:sd-receive-app-clipboard ask
     @anyvm @tag:sd-workstation deny
     @tag:sd-workstation @anyvm deny
     ### END securedrop-workstation ###