Add smack labels

Change-Id: I7a877af4c6de6643bad5db0d9c62f874a27fe256
Signed-off-by: Sunwook Bae <sunwook45.bae@samsung.com>

diff --git a/global_res/opt/etc/smack/accesses.d/osp-app-service.rule b/global_res/opt/etc/smack/accesses.d/osp-app-service.rule
new file mode 100644 (file)
index 0000000..bdcd907
--- /dev/null
+++ b/global_res/opt/etc/smack/accesses.d/osp-app-service.rule
@@ -0,0 +1,7 @@
+root aospd00043 rw
+_default_ aospd00043 rw
+aospd00043 alarm-server::alarm rw
+aospd00043 aul::launch x
+aospd00043 aul::terminate x
+aospd00043 secure-storage::tethering rw
+aospd00043 system::vconf_network rw

diff --git a/osp-app-service.manifest b/osp-app-service.manifest
index 868bc93..b02c1e2 100644 (file)
--- a/osp-app-service.manifest
+++ b/osp-app-service.manifest
@@ -2,8 +2,6 @@
        <define>
                <domain name="aospd00043"/>
                <request>
-                       <smack request="secure-storage::tethering" type="rw"/>
-                       <smack request="system::vconf_network" type="rw"/>
                </request>
        </define>
        <request>
@@ -21,5 +19,6 @@
                <filesystem path="/usr/lib/systemd/system/multi-user.target.wants/osp-tmpdir-setup.service" label="_" exec_label="none"/>
                <filesystem path="/usr/lib/systemd/user/status-manager.service" label="_" exec_label="none"/>
                <filesystem path="/usr/lib/systemd/user/tizen-mobile-session.target.wants/status-manager.service" label="_" exec_label="none"/>
+               <filesystem path="/opt/etc/smack/accesses.d/osp-app-service.rule" label="_"/>
        </assign>
 </manifest>

diff --git a/packaging/osp-app-service.spec b/packaging/osp-app-service.spec
index 5b9e7e3..5cb1a37 100644 (file)
--- a/packaging/osp-app-service.spec
+++ b/packaging/osp-app-service.spec
@@ -145,6 +145,7 @@ fi
 %manifest osp-app-service.manifest
 /usr/share/license/%{name}
 /usr/apps/*
+/opt/etc/smack/accesses.d/%{name}.rule
 %config /usr/lib/tmpfiles.d/osp-app-service.conf
 %config(noreplace) /opt/usr/etc/system_info_cache.ini
 %{_libdir}/systemd/*