projects / platform / core / security / security-manager.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 38d07f6)
Treat web only privilege as core privilege 55/89955/5
authorYunjin Lee <yunjin-.lee@samsung.com>
Wed, 28 Sep 2016 01:30:12 +0000 (10:30 +0900)
committerYunjin Lee <yunjin-.lee@samsung.com>
Mon, 24 Oct 2016 01:58:53 +0000 (18:58 -0700)
refer to https://review.tizen.org/gerrit/#/c/88685/

Change-Id: I27c0a9c1b7390cec52af5a65ff679f9ea29ae16d
Signed-off-by: Yunjin Lee <yunjin-.lee@samsung.com>
policy/usertype-admin.profile patch | blob | history
policy/usertype-guest.profile patch | blob | history
policy/usertype-normal.profile patch | blob | history
policy/usertype-security.profile patch | blob | history
policy/usertype-system.profile patch | blob | history

diff --git a/policy/usertype-admin.profile b/policy/usertype-admin.profile
index 190d63b90a869a21ffe0be05608d40a463f742c7..0d2311589dd8eeed96754fb639d0de31d59f1226 100644 (file)
--- a/policy/usertype-admin.profile
+++ b/policy/usertype-admin.profile
@@ -10,6 +10,7 @@
 *      http://tizen.org/privilege/antivirus.webprotect
 *      http://tizen.org/privilege/appdir.shareddata
 *      http://tizen.org/privilege/apphistory.read
+*      http://tizen.org/privilege/appmanager.certificate
 *      http://tizen.org/privilege/appmanager.kill
 *      http://tizen.org/privilege/appmanager.kill.bgapp
 *      http://tizen.org/privilege/appmanager.launch
@@ -27,6 +28,7 @@
 *      http://tizen.org/privilege/content.write
 *      http://tizen.org/privilege/d2d.datasharing
 *      http://tizen.org/privilege/datasharing
+*      http://tizen.org/privilege/datasync
 *      http://tizen.org/privilege/display
 *      http://tizen.org/privilege/download
 *      http://tizen.org/privilege/dpm.bluetooth
@@ -51,6 +53,7 @@
 *      http://tizen.org/privilege/externalstorage
 *      http://tizen.org/privilege/externalstorage.appdata
 *      http://tizen.org/privilege/fido.client
+*      http://tizen.org/privilege/fullscreen
 *      http://tizen.org/privilege/haptic
 *      http://tizen.org/privilege/healthinfo
 *      http://tizen.org/privilege/ime
@@ -93,17 +96,21 @@
 *      http://tizen.org/privilege/telephony
 *      http://tizen.org/privilege/telephony.admin
 *      http://tizen.org/privilege/tethering.admin
+*      http://tizen.org/privilege/tv.audio
+*      http://tizen.org/privilege/tv.channel
+*      http://tizen.org/privilege/tv.display
+*      http://tizen.org/privilege/tv.inputdevice
+*      http://tizen.org/privilege/tv.window
+*      http://tizen.org/privilege/unlimitedstorage
 *      http://tizen.org/privilege/use_ir
 *      http://tizen.org/privilege/volume.set
 *      http://tizen.org/privilege/vpnservice
 *      http://tizen.org/privilege/web-history.admin
+*      http://tizen.org/privilege/websetting
 *      http://tizen.org/privilege/widget.viewer
 *      http://tizen.org/privilege/wifidirect
 *      http://tizen.org/privilege/window.priority.set
-*      http://tizen.org/privilege/notexist
-*      http://tizen.org/privilege/internal/default/public
-*      http://tizen.org/privilege/internal/default/partner
-*      http://tizen.org/privilege/internal/default/platform
+*      http://tizen.org/privilege/internal/appdebugging
 *      http://tizen.org/privilege/internal/buxton
 *      http://tizen.org/privilege/internal/buxton/account.read
 *      http://tizen.org/privilege/internal/buxton/camcorder
@@ -116,17 +123,10 @@
 *      http://tizen.org/privilege/internal/buxton/readonly
 *      http://tizen.org/privilege/internal/buxton/telephony
 *      http://tizen.org/privilege/internal/dbus
+*      http://tizen.org/privilege/internal/default/partner
+*      http://tizen.org/privilege/internal/default/platform
+*      http://tizen.org/privilege/internal/default/public
 *      http://tizen.org/privilege/internal/inputdevice.block
-*      http://tizen.org/privilege/internal/usermanagement
-*      http://tizen.org/privilege/internal/appdebugging
 *      http://tizen.org/privilege/internal/service
-*      http://tizen.org/privilege/internal/web/appmanager.certificate
-*      http://tizen.org/privilege/internal/web/datasync
-*      http://tizen.org/privilege/internal/web/fullscreen
-*      http://tizen.org/privilege/internal/web/tv.audio
-*      http://tizen.org/privilege/internal/web/tv.channel
-*      http://tizen.org/privilege/internal/web/tv.display
-*      http://tizen.org/privilege/internal/web/tv.inputdevice
-*      http://tizen.org/privilege/internal/web/tv.window
-*      http://tizen.org/privilege/internal/web/unlimitedstorage
-*      http://tizen.org/privilege/internal/web/websetting
+*      http://tizen.org/privilege/internal/usermanagement
+*      http://tizen.org/privilege/notexist
\ No newline at end of file
diff --git a/policy/usertype-guest.profile b/policy/usertype-guest.profile
index ec3a3e111a8f99bbc0fefec24fd7f6f6fb3d72e6..33cd83ab46524744ef3084d2e243a7079b22be8e 100644 (file)
--- a/policy/usertype-guest.profile
+++ b/policy/usertype-guest.profile
@@ -10,6 +10,7 @@
 *      http://tizen.org/privilege/antivirus.webprotect
 *      http://tizen.org/privilege/appdir.shareddata
 *      http://tizen.org/privilege/apphistory.read
+*      http://tizen.org/privilege/appmanager.certificate
 *      http://tizen.org/privilege/appmanager.kill
 *      http://tizen.org/privilege/appmanager.kill.bgapp
 *      http://tizen.org/privilege/appmanager.launch
@@ -27,6 +28,7 @@
 *      http://tizen.org/privilege/content.write
 *      http://tizen.org/privilege/d2d.datasharing
 *      http://tizen.org/privilege/datasharing
+*      http://tizen.org/privilege/datasync
 *      http://tizen.org/privilege/display
 *      http://tizen.org/privilege/download
 *      http://tizen.org/privilege/dpm.bluetooth
@@ -51,6 +53,7 @@
 *      http://tizen.org/privilege/externalstorage
 *      http://tizen.org/privilege/externalstorage.appdata
 *      http://tizen.org/privilege/fido.client
+*      http://tizen.org/privilege/fullscreen
 *      http://tizen.org/privilege/haptic
 *      http://tizen.org/privilege/healthinfo
 *      http://tizen.org/privilege/ime
@@ -93,17 +96,21 @@
 *      http://tizen.org/privilege/telephony
 *      http://tizen.org/privilege/telephony.admin
 *      http://tizen.org/privilege/tethering.admin
+*      http://tizen.org/privilege/tv.audio
+*      http://tizen.org/privilege/tv.channel
+*      http://tizen.org/privilege/tv.display
+*      http://tizen.org/privilege/tv.inputdevice
+*      http://tizen.org/privilege/tv.window
+*      http://tizen.org/privilege/unlimitedstorage
 *      http://tizen.org/privilege/use_ir
 *      http://tizen.org/privilege/volume.set
 *      http://tizen.org/privilege/vpnservice
 *      http://tizen.org/privilege/web-history.admin
+*      http://tizen.org/privilege/websetting
 *      http://tizen.org/privilege/widget.viewer
 *      http://tizen.org/privilege/wifidirect
 *      http://tizen.org/privilege/window.priority.set
-*      http://tizen.org/privilege/notexist
-*      http://tizen.org/privilege/internal/default/public
-*      http://tizen.org/privilege/internal/default/partner
-*      http://tizen.org/privilege/internal/default/platform
+*      http://tizen.org/privilege/internal/appdebugging
 *      http://tizen.org/privilege/internal/buxton
 *      http://tizen.org/privilege/internal/buxton/account.read
 *      http://tizen.org/privilege/internal/buxton/camcorder
@@ -116,16 +123,9 @@
 *      http://tizen.org/privilege/internal/buxton/readonly
 *      http://tizen.org/privilege/internal/buxton/telephony
 *      http://tizen.org/privilege/internal/dbus
+*      http://tizen.org/privilege/internal/default/partner
+*      http://tizen.org/privilege/internal/default/platform
+*      http://tizen.org/privilege/internal/default/public
 *      http://tizen.org/privilege/internal/inputdevice.block
-*      http://tizen.org/privilege/internal/appdebugging
 *      http://tizen.org/privilege/internal/service
-*      http://tizen.org/privilege/internal/web/appmanager.certificate
-*      http://tizen.org/privilege/internal/web/datasync
-*      http://tizen.org/privilege/internal/web/fullscreen
-*      http://tizen.org/privilege/internal/web/tv.audio
-*      http://tizen.org/privilege/internal/web/tv.channel
-*      http://tizen.org/privilege/internal/web/tv.display
-*      http://tizen.org/privilege/internal/web/tv.inputdevice
-*      http://tizen.org/privilege/internal/web/tv.window
-*      http://tizen.org/privilege/internal/web/unlimitedstorage
-*      http://tizen.org/privilege/internal/web/websetting
+*      http://tizen.org/privilege/notexist
\ No newline at end of file
diff --git a/policy/usertype-normal.profile b/policy/usertype-normal.profile
index e3ba432187df627ab8d1e5ae51f706a8bbe9fe2d..a84d01ad4738fc8deb8e77eaddd92da09ab56972 100644 (file)
--- a/policy/usertype-normal.profile
+++ b/policy/usertype-normal.profile
@@ -10,6 +10,7 @@
 *      http://tizen.org/privilege/antivirus.webprotect
 *      http://tizen.org/privilege/appdir.shareddata
 *      http://tizen.org/privilege/apphistory.read
+*      http://tizen.org/privilege/appmanager.certificate
 *      http://tizen.org/privilege/appmanager.kill
 *      http://tizen.org/privilege/appmanager.kill.bgapp
 *      http://tizen.org/privilege/appmanager.launch
@@ -27,6 +28,7 @@
 *      http://tizen.org/privilege/content.write
 *      http://tizen.org/privilege/d2d.datasharing
 *      http://tizen.org/privilege/datasharing
+*      http://tizen.org/privilege/datasync
 *      http://tizen.org/privilege/display
 *      http://tizen.org/privilege/download
 *      http://tizen.org/privilege/dpm.bluetooth
@@ -51,6 +53,7 @@
 *      http://tizen.org/privilege/externalstorage
 *      http://tizen.org/privilege/externalstorage.appdata
 *      http://tizen.org/privilege/fido.client
+*      http://tizen.org/privilege/fullscreen
 *      http://tizen.org/privilege/haptic
 *      http://tizen.org/privilege/healthinfo
 *      http://tizen.org/privilege/ime
@@ -93,17 +96,21 @@
 *      http://tizen.org/privilege/telephony
 *      http://tizen.org/privilege/telephony.admin
 *      http://tizen.org/privilege/tethering.admin
+*      http://tizen.org/privilege/tv.audio
+*      http://tizen.org/privilege/tv.channel
+*      http://tizen.org/privilege/tv.display
+*      http://tizen.org/privilege/tv.inputdevice
+*      http://tizen.org/privilege/tv.window
+*      http://tizen.org/privilege/unlimitedstorage
 *      http://tizen.org/privilege/use_ir
 *      http://tizen.org/privilege/volume.set
 *      http://tizen.org/privilege/vpnservice
 *      http://tizen.org/privilege/web-history.admin
+*      http://tizen.org/privilege/websetting
 *      http://tizen.org/privilege/widget.viewer
 *      http://tizen.org/privilege/wifidirect
 *      http://tizen.org/privilege/window.priority.set
-*      http://tizen.org/privilege/notexist
-*      http://tizen.org/privilege/internal/default/public
-*      http://tizen.org/privilege/internal/default/partner
-*      http://tizen.org/privilege/internal/default/platform
+*      http://tizen.org/privilege/internal/appdebugging
 *      http://tizen.org/privilege/internal/buxton
 *      http://tizen.org/privilege/internal/buxton/account.read
 *      http://tizen.org/privilege/internal/buxton/camcorder
@@ -116,16 +123,9 @@
 *      http://tizen.org/privilege/internal/buxton/readonly
 *      http://tizen.org/privilege/internal/buxton/telephony
 *      http://tizen.org/privilege/internal/dbus
+*      http://tizen.org/privilege/internal/default/partner
+*      http://tizen.org/privilege/internal/default/platform
+*      http://tizen.org/privilege/internal/default/public
 *      http://tizen.org/privilege/internal/inputdevice.block
-*      http://tizen.org/privilege/internal/appdebugging
 *      http://tizen.org/privilege/internal/service
-*      http://tizen.org/privilege/internal/web/appmanager.certificate
-*      http://tizen.org/privilege/internal/web/datasync
-*      http://tizen.org/privilege/internal/web/fullscreen
-*      http://tizen.org/privilege/internal/web/tv.audio
-*      http://tizen.org/privilege/internal/web/tv.channel
-*      http://tizen.org/privilege/internal/web/tv.display
-*      http://tizen.org/privilege/internal/web/tv.inputdevice
-*      http://tizen.org/privilege/internal/web/tv.window
-*      http://tizen.org/privilege/internal/web/unlimitedstorage
-*      http://tizen.org/privilege/internal/web/websetting
+*      http://tizen.org/privilege/notexist
\ No newline at end of file
diff --git a/policy/usertype-security.profile b/policy/usertype-security.profile
index e3ba432187df627ab8d1e5ae51f706a8bbe9fe2d..c56c46723fddd60d674423415b0ff5317558dff5 100644 (file)
--- a/policy/usertype-security.profile
+++ b/policy/usertype-security.profile
@@ -1,4 +1,4 @@
-'Normal usertype permissions
+'Security usertype permissions
 'app   permission
 *      http://tizen.org/privilege/account.read
 *      http://tizen.org/privilege/account.write
@@ -10,6 +10,7 @@
 *      http://tizen.org/privilege/antivirus.webprotect
 *      http://tizen.org/privilege/appdir.shareddata
 *      http://tizen.org/privilege/apphistory.read
+*      http://tizen.org/privilege/appmanager.certificate
 *      http://tizen.org/privilege/appmanager.kill
 *      http://tizen.org/privilege/appmanager.kill.bgapp
 *      http://tizen.org/privilege/appmanager.launch
@@ -27,6 +28,7 @@
 *      http://tizen.org/privilege/content.write
 *      http://tizen.org/privilege/d2d.datasharing
 *      http://tizen.org/privilege/datasharing
+*      http://tizen.org/privilege/datasync
 *      http://tizen.org/privilege/display
 *      http://tizen.org/privilege/download
 *      http://tizen.org/privilege/dpm.bluetooth
@@ -51,6 +53,7 @@
 *      http://tizen.org/privilege/externalstorage
 *      http://tizen.org/privilege/externalstorage.appdata
 *      http://tizen.org/privilege/fido.client
+*      http://tizen.org/privilege/fullscreen
 *      http://tizen.org/privilege/haptic
 *      http://tizen.org/privilege/healthinfo
 *      http://tizen.org/privilege/ime
@@ -93,17 +96,21 @@
 *      http://tizen.org/privilege/telephony
 *      http://tizen.org/privilege/telephony.admin
 *      http://tizen.org/privilege/tethering.admin
+*      http://tizen.org/privilege/tv.audio
+*      http://tizen.org/privilege/tv.channel
+*      http://tizen.org/privilege/tv.display
+*      http://tizen.org/privilege/tv.inputdevice
+*      http://tizen.org/privilege/tv.window
+*      http://tizen.org/privilege/unlimitedstorage
 *      http://tizen.org/privilege/use_ir
 *      http://tizen.org/privilege/volume.set
 *      http://tizen.org/privilege/vpnservice
 *      http://tizen.org/privilege/web-history.admin
+*      http://tizen.org/privilege/websetting
 *      http://tizen.org/privilege/widget.viewer
 *      http://tizen.org/privilege/wifidirect
 *      http://tizen.org/privilege/window.priority.set
-*      http://tizen.org/privilege/notexist
-*      http://tizen.org/privilege/internal/default/public
-*      http://tizen.org/privilege/internal/default/partner
-*      http://tizen.org/privilege/internal/default/platform
+*      http://tizen.org/privilege/internal/appdebugging
 *      http://tizen.org/privilege/internal/buxton
 *      http://tizen.org/privilege/internal/buxton/account.read
 *      http://tizen.org/privilege/internal/buxton/camcorder
@@ -116,16 +123,9 @@
 *      http://tizen.org/privilege/internal/buxton/readonly
 *      http://tizen.org/privilege/internal/buxton/telephony
 *      http://tizen.org/privilege/internal/dbus
+*      http://tizen.org/privilege/internal/default/partner
+*      http://tizen.org/privilege/internal/default/platform
+*      http://tizen.org/privilege/internal/default/public
 *      http://tizen.org/privilege/internal/inputdevice.block
-*      http://tizen.org/privilege/internal/appdebugging
 *      http://tizen.org/privilege/internal/service
-*      http://tizen.org/privilege/internal/web/appmanager.certificate
-*      http://tizen.org/privilege/internal/web/datasync
-*      http://tizen.org/privilege/internal/web/fullscreen
-*      http://tizen.org/privilege/internal/web/tv.audio
-*      http://tizen.org/privilege/internal/web/tv.channel
-*      http://tizen.org/privilege/internal/web/tv.display
-*      http://tizen.org/privilege/internal/web/tv.inputdevice
-*      http://tizen.org/privilege/internal/web/tv.window
-*      http://tizen.org/privilege/internal/web/unlimitedstorage
-*      http://tizen.org/privilege/internal/web/websetting
+*      http://tizen.org/privilege/notexist
\ No newline at end of file
diff --git a/policy/usertype-system.profile b/policy/usertype-system.profile
index 660411d8c0d9f899c72abe6e6fc1b8c45ec7e11f..b0ea4b5f754229749f1e02436cd339ac73e5358d 100644 (file)
--- a/policy/usertype-system.profile
+++ b/policy/usertype-system.profile
@@ -10,6 +10,7 @@
 *      http://tizen.org/privilege/antivirus.webprotect
 *      http://tizen.org/privilege/appdir.shareddata
 *      http://tizen.org/privilege/apphistory.read
+*      http://tizen.org/privilege/appmanager.certificate
 *      http://tizen.org/privilege/appmanager.kill
 *      http://tizen.org/privilege/appmanager.kill.bgapp
 *      http://tizen.org/privilege/appmanager.launch
@@ -27,6 +28,7 @@
 *      http://tizen.org/privilege/content.write
 *      http://tizen.org/privilege/d2d.datasharing
 *      http://tizen.org/privilege/datasharing
+*      http://tizen.org/privilege/datasync
 *      http://tizen.org/privilege/display
 *      http://tizen.org/privilege/download
 *      http://tizen.org/privilege/dpm.bluetooth
@@ -51,6 +53,7 @@
 *      http://tizen.org/privilege/externalstorage
 *      http://tizen.org/privilege/externalstorage.appdata
 *      http://tizen.org/privilege/fido.client
+*      http://tizen.org/privilege/fullscreen
 *      http://tizen.org/privilege/haptic
 *      http://tizen.org/privilege/healthinfo
 *      http://tizen.org/privilege/ime
@@ -93,17 +96,21 @@
 *      http://tizen.org/privilege/telephony
 *      http://tizen.org/privilege/telephony.admin
 *      http://tizen.org/privilege/tethering.admin
+*      http://tizen.org/privilege/tv.audio
+*      http://tizen.org/privilege/tv.channel
+*      http://tizen.org/privilege/tv.display
+*      http://tizen.org/privilege/tv.inputdevice
+*      http://tizen.org/privilege/tv.window
+*      http://tizen.org/privilege/unlimitedstorage
 *      http://tizen.org/privilege/use_ir
 *      http://tizen.org/privilege/volume.set
 *      http://tizen.org/privilege/vpnservice
 *      http://tizen.org/privilege/web-history.admin
+*      http://tizen.org/privilege/websetting
 *      http://tizen.org/privilege/widget.viewer
 *      http://tizen.org/privilege/wifidirect
 *      http://tizen.org/privilege/window.priority.set
-*      http://tizen.org/privilege/notexist
-*      http://tizen.org/privilege/internal/default/public
-*      http://tizen.org/privilege/internal/default/partner
-*      http://tizen.org/privilege/internal/default/platform
+*      http://tizen.org/privilege/internal/appdebugging
 *      http://tizen.org/privilege/internal/buxton
 *      http://tizen.org/privilege/internal/buxton/account.read
 *      http://tizen.org/privilege/internal/buxton/camcorder
@@ -116,16 +123,9 @@
 *      http://tizen.org/privilege/internal/buxton/readonly
 *      http://tizen.org/privilege/internal/buxton/telephony
 *      http://tizen.org/privilege/internal/dbus
+*      http://tizen.org/privilege/internal/default/partner
+*      http://tizen.org/privilege/internal/default/platform
+*      http://tizen.org/privilege/internal/default/public
 *      http://tizen.org/privilege/internal/inputdevice.block
-*      http://tizen.org/privilege/internal/appdebugging
 *      http://tizen.org/privilege/internal/service
-*      http://tizen.org/privilege/internal/web/appmanager.certificate
-*      http://tizen.org/privilege/internal/web/datasync
-*      http://tizen.org/privilege/internal/web/fullscreen
-*      http://tizen.org/privilege/internal/web/tv.audio
-*      http://tizen.org/privilege/internal/web/tv.channel
-*      http://tizen.org/privilege/internal/web/tv.display
-*      http://tizen.org/privilege/internal/web/tv.inputdevice
-*      http://tizen.org/privilege/internal/web/tv.window
-*      http://tizen.org/privilege/internal/web/unlimitedstorage
-*      http://tizen.org/privilege/internal/web/websetting
+*      http://tizen.org/privilege/notexist
\ No newline at end of file
Domain: Security / Access Control;