Add policy DB update script for mdm blacklist

Change-Id: I7c831554c2e643ac31be9be332e0351b5afbb0cb
Signed-off-by: Yunjin Lee <yunjin-.lee@samsung.com>

diff --git a/capi/res/dbspace/CMakeLists.txt b/capi/res/dbspace/CMakeLists.txt
index 0f8d29a..b93a391 100644 (file)
--- a/capi/res/dbspace/CMakeLists.txt
+++ b/capi/res/dbspace/CMakeLists.txt
@@ -28,4 +28,5 @@ ADD_CUSTOM_TARGET(privilege-db ALL DEPENDS ${CORE_PRIVILEGE_DB} ${WRT_PRIVILEGE_
 
 INSTALL(FILES ${CORE_PRIVILEGE_DB} ${WRT_PRIVILEGE_DB} ${CORE_PRIVILEGE_MAPPING_DB} ${WRT_PRIVILEGE_MAPPING_DB} DESTINATION ${DATADIR}/privilege-manager/)
 INSTALL(FILES ${POLICY_DB} ${POLICY_DB}-journal DESTINATION ${TZ_SYS_DB}/)
+INSTALL(PROGRAMS policy_db_updater.sh DESTINATION ${DATADIR}/privilege-manager/)
 

diff --git a/capi/res/dbspace/policy_db_updater.sh b/capi/res/dbspace/policy_db_updater.sh
new file mode 100755 (executable)
index 0000000..987c6f6
--- /dev/null
+++ b/capi/res/dbspace/policy_db_updater.sh
@@ -0,0 +1,32 @@
+#!/bin/sh -e
+
+PATH=/bin:/usr/bin:/sbin:/usr/sbin
+
+. /etc/tizen-platform.conf
+
+DB_NAME=${TZ_SYS_DB}/.policy.db
+MDM_BLACKLIST=${TZ_SYS_RO_SHARE}/security-config/mdm_blacklist
+
+if [ -a $MDM_BLACKLIST ]; then
+       echo "mdm blacklist exist"
+       IFS=$'\n'
+       for i in `cat $MDM_BLACKLIST`
+       do
+               temp=`echo $i | awk '/^#/'`
+       if [ ! "$temp" = "" ]
+       then
+           continue
+           fi
+               echo "insert $i"
+               sqlite3 $DB_NAME "insert or ignore into disable_list values ('376', '${i}');"
+       done
+
+       echo "Check inserted data"
+       echo "DPM blacklist..."
+       sqlite3 $DB_NAME "select * from prevent_list"
+       echo ""
+       echo "MDM blacklist..."
+       sqlite3 $DB_NAME "select * from disable_list"
+else
+       echo "mdm blacklist not exist"
+fi

diff --git a/packaging/privilege-checker.spec b/packaging/privilege-checker.spec
index 0a21e90..2edda78 100644 (file)
--- a/packaging/privilege-checker.spec
+++ b/packaging/privilege-checker.spec
@@ -133,6 +133,7 @@ mkdir -p %{buildroot}/%{TZ_SYS_DB}
 chsmack -a System %{TZ_SYS_DB}/.policy.db
 chsmack -a System %{TZ_SYS_DB}/.policy.db-journal
 %endif
+%{_datadir}/privilege-manager/policy_db_updater.sh
 
 %postun -n security-privilege-manager -p /sbin/ldconfig
 
@@ -147,6 +148,7 @@ chsmack -a System %{TZ_SYS_DB}/.policy.db-journal
 %{_datadir}/privilege-manager/.core_privilege_mapping.db
 %{_datadir}/privilege-manager/.wrt_privilege_info.db
 %{_datadir}/privilege-manager/.wrt_privilege_mapping.db
+%attr(700,root,root) %{_datadir}/privilege-manager/policy_db_updater.sh
 %config(noreplace) %attr(0660, root, security_fw) /%{TZ_SYS_DB}/.policy.db
 %config(noreplace) %attr(0660, root, security_fw) /%{TZ_SYS_DB}/.policy.db-journal
 %endif