agentName:Acl
trafficPolicies/input/cli, TrafficPolicy::TrafficPolicyConfig, r
trafficPolicies/param/config/cpu, TrafficPolicy::CpuPolicyGlobalConfig, r
trafficPolicies/fieldset/input, Tac::Dir, ri
trafficPolicies/cpu/vrf, PolicyMap::VrfConfig, r
trafficPolicies/cpu/intf, PolicyMap::IntfConfig, r
lag/input/config/cli, Lag::Input::Config, r
routing/vrf/routingInfo/status, Tac::Dir, ri
routing6/vrf/routingInfo/status, Tac::Dir, ri
l3/intf/status, L3::Intf::StatusDir, ri
ip/status, Ip::Status, r
ip6/status, Ip6::Status, r
%cellPath/routing/bgp/export/trafficPolicy, Tac::Dir, ri
trafficPolicies/statusRequest, Tac::Dir, ri
trafficPolicies/hardware/status/cpu, TrafficPolicy::HwStatus, r

# Conditional mount groups are used as Acl agent uses passive mounts, and this is the
# canonical way to prevent Sysdb from creating these Tac::Dir entries unless/until
# needed.
MountGroup: CpuPolicyVrfMounts, 99
Condition: true == /%sysname/Sysdb/trafficPolicies/hardware/status/cpu.cpuTrafficPolicySupported
%cellPath/trafficPolicies/status/cpu-vrf-software, TrafficPolicy::Status, fwc

MountGroup: CpuPolicyIntfMounts, 99
Condition: true == /%sysname/Sysdb/trafficPolicies/hardware/status/cpu.intfCpuTrafficPolicySupported
%cellPath/trafficPolicies/status/cpu-intf-software, TrafficPolicy::Status, fwc
trafficPolicies/hardware/status/cpu, TrafficPolicy::HwStatus, r
