dbus-policy: add rule default deny own

Change-Id: Ib48376012efbbc9eac9f97b92f3ccaee5de89e8f

diff --git a/packaging/calendar-service.conf.in b/packaging/calendar-service.conf.in
index ab1e9b7..d49dcd1 100644 (file)
--- a/packaging/calendar-service.conf.in
+++ b/packaging/calendar-service.conf.in
@@ -2,18 +2,15 @@
 <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
 <busconfig>
-    <policy user="root">
-        <allow own="@DBUS_INTERFACE@"/>
-               <allow send_destination="@DBUS_INTERFACE@" send_interface="@DBUS_INTERFACE@"/>
-               <allow receive_sender="@DBUS_INTERFACE@"/>
-    </policy>
-    <policy user="system">
-        <allow own="@DBUS_INTERFACE@"/>
-               <allow send_destination="@DBUS_INTERFACE@" send_interface="@DBUS_INTERFACE@"/>
-               <allow receive_sender="@DBUS_INTERFACE@"/>
-    </policy>
     <policy context="default">
-        <allow send_destination="@DBUS_INTERFACE@"/>
+               <deny send_destination="@DBUS_INTERFACE@"/>
+               <allow send_destination="@DBUS_INTERFACE@" send_type="signal"/>
+               <check send_destination="@DBUS_INTERFACE@"
+                               send_interface="@DBUS_INTERFACE@" send_member="register_resource"
+                               />
+               <check send_destination="@DBUS_INTERFACE@"
+                               send_interface="@DBUS_INTERFACE@" send_member="unregister_resource"
+                               />
                <check send_destination="@DBUS_INTERFACE@"
                                send_interface="@DBUS_INTERFACE@" send_member="check_permission_write"
                                privilege="http://tizen.org/privilege/calendar.write"/>