Grant System::Shared label to pakage-directory

[Background]
- App-installer is run as System label and it handles
  package-directory of trust-anchor
- Launchpad is run as User label and it reads package-directory

[Problem]
- Files of package-directory is made by app-installer as System label.
  So, Launchpad cannot read it.

[Solution]
- Grant System::Shared label.

Change-Id: I492ec4c5e4ddd2d530b88581eb2fbfc8d32a4874
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>

diff --git a/packaging/trust-anchor.manifest.in b/packaging/trust-anchor.manifest.in
index b5de84532e7e75f89d99c7901442a79c32bb71ea..30520d51efcd055d3eb93591d394b9ec784763d3 100644 (file)
--- a/packaging/trust-anchor.manifest.in
+++ b/packaging/trust-anchor.manifest.in
@@ -4,5 +4,6 @@
        </request>
        <assign>
                <filesystem path="@TANCHOR_BASE@" label="@SMACK_LABEL@" type="transmutable" />
+               <filesystem path="@TANCHOR_PKG@" label="@PKG_SMACK_LABEL@" type="transmutable" />
        </assign>
 </manifest>

diff --git a/packaging/trust-anchor.spec b/packaging/trust-anchor.spec
index a372962cae757b64f9194ac8ea0da267a39294a4..2e0e8d41d87ac99c88d5b7278e6d0098a5d94ecf 100644 (file)
--- a/packaging/trust-anchor.spec
+++ b/packaging/trust-anchor.spec
@@ -20,6 +20,7 @@ Requires(postun): /sbin/ldconfig
 %global user_name        security_fw
 %global group_name       security_fw
 %global smack_label      System
+%global pkg_smack_label  System::Shared
 
 %global tanchor_base     %{TZ_SYS_DATA}/%{lib_name}
 %global tanchor_pkg      %{tanchor_base}/pkg
@@ -61,6 +62,7 @@ SSL root certificates for its HTTPS communication.
                 -DUSER_NAME=%{user_name} \
                 -DGROUP_NAME=%{group_name} \
                 -DSMACK_LABEL=%{smack_label} \
+                -DPKG_SMACK_LABEL=%{pkg_smack_label} \
                 -DTANCHOR_BASE=%{tanchor_base} \
                 -DTANCHOR_PKG=%{tanchor_pkg} \
                 -DTANCHOR_BUNDLE=%{tanchor_bundle} \