tizen: configuration files

tizen: configuration files

The following commits were squashed:
    - Ibef1d780d3a711b9251cddc41b16c91a154951e2
    - I633bf5a15041da8f40f8cde66e488c1b14f25045
    - I6b36320191fcc69d5b45cfec5b27a462d0ab8310
    - I9aa53189eae878464acba58b5fdd490f6b3ba7f8
    - I49f402d56f83700fe7528eab3e034cd845afc0a2
    - I550c07ede30a0bb70a9bb3ca00d5771e1722826b
    - I0523d4cc46ce2edd05e479e9101c6d20f70b4296
    - Ia3759dea4fb248aa88dcd303a4ae4a400d89f580

--8<-------------------------------------------------------->8---

Disable shutdown watchdog as default

Note: The original commit altered the source rather than configuration.

--8<-------------------------------------------------------->8---

Modification of journald configuration for minimal log saving

There were several requirements for minimal disk log.
Especially, Default Tizen tries to keep the the log size under 10MB
because Tizen provides other logging system DLOG.

--8<-------------------------------------------------------->8---

journald: Limit system journal size to 10M

In v219, journald implicitly limits system journal(/var/log/journal) size
to 8MB(twice of the minimum journal file size) with SystemMaxUse=0 setting.
But in v231, journald doesn't stop allocating when max_use is 0.

--8<-------------------------------------------------------->8---

journald: Limit system journal size from 10M to 4M

A journald always loads two journal files (one is current and the other
is just before) in memory using mmap. So it always consumes as much
memory as file size.

A journald rotates the log in 8 files. Each log file has a SystemMaxUse/8
size. (But the minimum value is 512k.)

So SystemMaxUse is 4M to minimize memory usage. (512k * 8 = 4M)

sh-3.2# memps `pidof systemd-journald`
S(CODE)  S(DATA)  P(CODE)  P(DATA)  ADDR(start-end)  OBJECT NAME
-------- -------- -------- -------- -----------------------------------------------
4        0      508        0 f6d80000-f6ec0000 /opt/var/log/journal/999fcdd05c714da0859337c08df2230e/system@800f735a88e44c35bc7cca47\
9a6984b1-00000000000015ad-000561d5c48aab1f.journal
0        4      302        0 f6c40000-f6d80000 /opt/var/log/journal/999fcdd05c714da0859337c08df2230e/system.journal

--8<-------------------------------------------------------->8---

Set the default deny policy for system dbus

org.freedesktop.locale1.conf  - send: deny, own: deny
org.freedesktop.login1.conf   - send: deny, own: deny
org.freedesktop.systemd1.conf - send: deny, own: deny

--8<-------------------------------------------------------->8---

D-Bus policy configs: fixed rules

Removed duplicate rules in all three configs, and specified proper sender
for receiving ActivationRequest signal in org.freedesktop.systemd1.conf.

--8<-------------------------------------------------------->8---

logind: change the power key to disabled

Tizen does not support power off without deviced.
So, you need to turn off the power key function in logind.

1. Disable TAG+="power-switch" uevent rules because logind uses
   "power-switch" uevent to recognize the power key.
2. Change default behavior for power key to ignore.

--8<-------------------------------------------------------->8---

tizen: Set DefaultSmackProcessLabel to User

Run user session services with the User SMACK label instead of
System::Privileged inherited from systemd.

--8<-------------------------------------------------------->8---

tizen: DefaultSmackProcessLabel=System

Since most system services run with the System SMACK label, to avoid
unnecessary modification to unit files, which results in conflicts
during upgrades, set System as the default label.

--8<-------------------------------------------------------->8---

Author: Kunhoon Baik <knhoon.baik@samsung.com>
Author: Mateusz Moscicki <m.moscicki2@partner.samsung.com>
Author: Adrian Szyndela <adrian.s@samsung.com>
Signed-off-by: Hyeongsik Min <hyeongsik.min@samsung.com>
Signed-off-by: Hyotaek Shim <hyotaek.shim@samsung.com>
Signed-off-by: INSUN PYO <insun.pyo@samsung.com>
Signed-off-by: Łukasz Stelmach <l.stelmach@samsung.com>
WIP: system.conf.in RebootWatchdogSec=off

Change-Id: I3dda6588884dc804fd944e6385c825865656917b
Signed-off-by: Łukasz Stelmach <l.stelmach@samsung.com>