Modification about smack label of db file belong to process. 16/20716/2 accepted/tizen/common/20140519.225630 submit/tizen/20140519.014557
authorjooseong.lee <jooseong.lee@samsung.com>
Mon, 12 May 2014 10:06:51 +0000 (19:06 +0900)
committerjooseong lee <jooseong.lee@samsung.com>
Mon, 12 May 2014 10:10:28 +0000 (03:10 -0700)
[Problem]
Most db files have 'floor' label.  Because these are created during image creation time.
Therefore no process can write the dbs (since 'floor' label allows only read and execute)

[Solution]
Modify smack label of the db files based on condition below referring three domain model
Condition1. Assign domain of process which creates db files
Condition2. Assign domain of process accesses db files.

Change-Id: Ic635f79c105e891b8e13cc9e7eacd6694ca5c0ef
Signed-off-by: jooseong.lee <jooseong.lee@samsung.com>
packaging/msg-service.spec

index 59de993..6c244e9 100755 (executable)
@@ -363,6 +363,7 @@ chown :6011 /opt/usr/dbspace/.msg_service.db
 chown :6011 /opt/usr/dbspace/.msg_service.db-journal
 chmod 660 /opt/usr/dbspace/.msg_service.db
 chmod 660 /opt/usr/dbspace/.msg_service.db-journal
+chsmack -a 'User' /opt/usr/dbspace/.msg_service.db*
 mkdir -p /opt/usr/data/msg-service
 chgrp db_msg_service /opt/usr/data/msg-service