Remove SMACK rule file(.rule) according three domain model 41/19441/2 accepted/tizen/common/20140506.134615 accepted/tizen/ivi/20140519.220117 submit/tizen/20140502.064352
authorseong.chung <seong.chung@samsung.com>
Fri, 11 Apr 2014 14:28:16 +0000 (23:28 +0900)
committerSeongwook Chung <seong.chung@samsung.com>
Fri, 11 Apr 2014 14:29:53 +0000 (07:29 -0700)
Since SMACK only allows three labels, "_"(floor), "User", "System"
The labels of current rule file are not appropriate

Solution:
- Remove rule file (packaging/system-server.rule)
- Remove install statement about installing rule file described in CMakeLists.txt
- Remove file path and name declaration of spec file (packaging/system-server.spec)

Reference site
https://wiki.tizen.org/wiki/Security:SmackThreeDomainModel

Change-Id: I55e2e1b34d35b5a8d2dc7328cbc763135663a598
Signed-off-by: seong.chung <seong.chung@samsung.com>
CMakeLists.txt
packaging/system-server.rule [deleted file]
packaging/system-server.spec

index 6b0178b..891c2c9 100755 (executable)
@@ -176,7 +176,6 @@ INSTALL(TARGETS ${PROJECT_NAME} DESTINATION bin)
 INSTALL(FILES ${MOVINAND_FORMAT} DESTINATION bin)
 INSTALL(PROGRAMS ${CMAKE_BINARY_DIR}/device-daemon DESTINATION bin)
 INSTALL(FILES system-server.conf DESTINATION /etc/dbus-1/system.d)
-INSTALL(FILES ${CMAKE_SOURCE_DIR}/packaging/system-server.rule DESTINATION /opt/etc/smack/accesses.d)
 INSTALL(PROGRAMS ${CMAKE_CURRENT_SOURCE_DIR}/scripts/mmc-smack-label DESTINATION bin)
 INSTALL(PROGRAMS ${CMAKE_CURRENT_SOURCE_DIR}/scripts/shutdown.sh DESTINATION ${LIB_INSTALL_DIR}/system-server)
 INSTALL(PROGRAMS ${CMAKE_CURRENT_SOURCE_DIR}/utils/set_pmon DESTINATION bin)
diff --git a/packaging/system-server.rule b/packaging/system-server.rule
deleted file mode 100644 (file)
index 23855cb..0000000
+++ /dev/null
@@ -1,7 +0,0 @@
-deviced sys-assert::core rwxat
-deviced system::vconf rwxat
-deviced telephony_framework::api_manager r
-deviced telephony_framework::api_modem wx
-deviced data-provider-master::notification rw
-deviced data-provider-master::notification.client w
-pulseaudio deviced rw
index e1f668d..c6249ad 100755 (executable)
@@ -283,7 +283,6 @@ systemctl daemon-reload
 %license LICENSE.APLv2
 %config %{_sysconfdir}/dbus-1/system.d/system-server.conf
 %{_bindir}/system_server
-/opt/etc/smack/accesses.d/system-server.rule
 %{_libdir}/system-server/shutdown.sh
 %if %{undefined simulator}
 %{_bindir}/restart