Set write/setgid bit on data, shared/data dir 42/100642/2 accepted/tizen/3.0/common/20161130.133553 accepted/tizen/3.0/ivi/20161130.091212 accepted/tizen/3.0/mobile/20161130.091112 accepted/tizen/3.0/tv/20161130.091140 accepted/tizen/3.0/wearable/20161130.091157 submit/tizen_3.0/20161130.023420
authorSangyoon Jang <s89.jang@samsung.com>
Tue, 29 Nov 2016 00:50:20 +0000 (09:50 +0900)
committerSangyoon Jang <s89.jang@samsung.com>
Tue, 29 Nov 2016 04:34:11 +0000 (20:34 -0800)
commit629835814212d9fa25a3491bb5c827cd40f488e0
treebcdc3dda6cc55e212ab52bf0d4b475f4e5f663e0
parent7cc569eb959ed7a4a3a81c97894cbd53b8660bc8
Set write/setgid bit on data, shared/data dir

System daemons who want to access data, shared/data need
CAP_DAC_OVERRIDE, but this cap gives unwanted permissions too much.
So we modify permission bits of writable directories and
make available for system daemons with minimum permission.

Change-Id: I8b53e60686cffa56c0be838312bc16859bc6ee5c
Signed-off-by: Sangyoon Jang <s89.jang@samsung.com>
src/common/shared_dirs.cc
src/common/step/filesystem/step_change_owner.cc