projects / platform / core / security / security-config.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: d7ec25b)
Change Smack label fro crash-service to System::Privileged 70/241470/1
authorMateusz Moscicki <m.moscicki2@partner.samsung.com>
Thu, 20 Aug 2020 10:18:44 +0000 (12:18 +0200)
committerMateusz Moscicki <m.moscicki2@partner.samsung.com>
Thu, 20 Aug 2020 10:18:44 +0000 (12:18 +0200)
The System::Privileged label is needed because on newer kernels (>=
4.20) it's not possible to read/ptrace processes listed in onlycap set.
Crash-service needs the right to do ptrace to correctly generate
reports.

Change-Id: Iad849f0b11eb3eece8d537fd2856daf59ffe757c

test/new_service_test/emulator/common/systemd_service.list patch | blob | history
test/new_service_test/emulator/iot/systemd_service.list patch | blob | history
test/new_service_test/emulator/mobile/systemd_service.list patch | blob | history
test/new_service_test/emulator/wearable/systemd_service.list patch | blob | history
test/new_service_test/target/common/systemd_service.list patch | blob | history
test/new_service_test/target/iot/systemd_service.list patch | blob | history
test/new_service_test/target/mobile/systemd_service.list patch | blob | history
test/new_service_test/target/tv/systemd_service.list patch | blob | history
test/new_service_test/target/wearable/systemd_service.list patch | blob | history

diff --git a/test/new_service_test/emulator/common/systemd_service.list b/test/new_service_test/emulator/common/systemd_service.list
index dba256c778e85997848f90c9c867c3440816d822..392b781aeb6016cfa7fa666e8c6013f74c566986 100755 (executable)
--- a/test/new_service_test/emulator/common/systemd_service.list
+++ b/test/new_service_test/emulator/common/systemd_service.list
@@ -42,7 +42,7 @@
 ;console-shell.service;root;root;System;
 ;container-getty@.service;root;root;System;
 ;contextd.service;service_fw;service_fw;System;
-;crash-service.service;crash_worker;crash_worker;System;
+;crash-service.service;crash_worker;crash_worker;System::Privileged;
 ;csr.service;security_fw;security_fw;System;
 ;cynara.service;cynara;cynara;System;
 ;data-provider-master.service;app_fw;app_fw;System;
diff --git a/test/new_service_test/emulator/iot/systemd_service.list b/test/new_service_test/emulator/iot/systemd_service.list
index dba256c778e85997848f90c9c867c3440816d822..392b781aeb6016cfa7fa666e8c6013f74c566986 100755 (executable)
--- a/test/new_service_test/emulator/iot/systemd_service.list
+++ b/test/new_service_test/emulator/iot/systemd_service.list
@@ -42,7 +42,7 @@
 ;console-shell.service;root;root;System;
 ;container-getty@.service;root;root;System;
 ;contextd.service;service_fw;service_fw;System;
-;crash-service.service;crash_worker;crash_worker;System;
+;crash-service.service;crash_worker;crash_worker;System::Privileged;
 ;csr.service;security_fw;security_fw;System;
 ;cynara.service;cynara;cynara;System;
 ;data-provider-master.service;app_fw;app_fw;System;
diff --git a/test/new_service_test/emulator/mobile/systemd_service.list b/test/new_service_test/emulator/mobile/systemd_service.list
index dba256c778e85997848f90c9c867c3440816d822..392b781aeb6016cfa7fa666e8c6013f74c566986 100755 (executable)
--- a/test/new_service_test/emulator/mobile/systemd_service.list
+++ b/test/new_service_test/emulator/mobile/systemd_service.list
@@ -42,7 +42,7 @@
 ;console-shell.service;root;root;System;
 ;container-getty@.service;root;root;System;
 ;contextd.service;service_fw;service_fw;System;
-;crash-service.service;crash_worker;crash_worker;System;
+;crash-service.service;crash_worker;crash_worker;System::Privileged;
 ;csr.service;security_fw;security_fw;System;
 ;cynara.service;cynara;cynara;System;
 ;data-provider-master.service;app_fw;app_fw;System;
diff --git a/test/new_service_test/emulator/wearable/systemd_service.list b/test/new_service_test/emulator/wearable/systemd_service.list
index 10a9b428a298ad71a78d85a692ac7def38c502c5..d1792575aec8769dfd6173d812404685b18fe537 100644 (file)
--- a/test/new_service_test/emulator/wearable/systemd_service.list
+++ b/test/new_service_test/emulator/wearable/systemd_service.list
@@ -35,7 +35,7 @@
 ;console-shell.service;root;root;System;
 ;container-getty@.service;root;root;System;
 ;contextd.service;service_fw;service_fw;System;
-;crash-service.service;crash_worker;crash_worker;System;
+;crash-service.service;crash_worker;crash_worker;System::Privileged;
 ;csr.service;security_fw;security_fw;System;
 ;cynara.service;cynara;cynara;System;
 ;data-provider-master.service;app_fw;app_fw;System;
diff --git a/test/new_service_test/target/common/systemd_service.list b/test/new_service_test/target/common/systemd_service.list
index 7252340fb1dbd65ec26905da25b028a0f010e539..a7c310171f135052ae41babef811188d42b2d488 100644 (file)
--- a/test/new_service_test/target/common/systemd_service.list
+++ b/test/new_service_test/target/common/systemd_service.list
@@ -47,7 +47,7 @@
 ;console-shell.service;root;root;System;
 ;container-getty@.service;root;root;System;
 ;contextd.service;service_fw;service_fw;System;
-;crash-service.service;crash_worker;crash_worker;System;
+;crash-service.service;crash_worker;crash_worker;System::Privileged;
 ;csr.service;security_fw;security_fw;System;
 ;cynara.service;cynara;cynara;System;
 ;data-provider-master.service;app_fw;app_fw;System;
diff --git a/test/new_service_test/target/iot/systemd_service.list b/test/new_service_test/target/iot/systemd_service.list
index 1a8d160dfdc60688bfbf4905347221f5a38e4adc..37e2b27e993f03fdfcdb2631eff820455a40d6a4 100644 (file)
--- a/test/new_service_test/target/iot/systemd_service.list
+++ b/test/new_service_test/target/iot/systemd_service.list
@@ -47,7 +47,7 @@
 ;console-shell.service;root;root;System;
 ;container-getty@.service;root;root;System;
 ;contextd.service;service_fw;service_fw;System;
-;crash-service.service;crash_worker;crash_worker;System;
+;crash-service.service;crash_worker;crash_worker;System::Privileged;
 ;csr.service;security_fw;security_fw;System;
 ;cynara.service;cynara;cynara;System;
 ;data-provider-master.service;app_fw;app_fw;System;
diff --git a/test/new_service_test/target/mobile/systemd_service.list b/test/new_service_test/target/mobile/systemd_service.list
index 8b96196946d91315cd87d326dbc5e7801dd2dc0d..db1211addfc2962ca49f2e799ba68f372140a058 100644 (file)
--- a/test/new_service_test/target/mobile/systemd_service.list
+++ b/test/new_service_test/target/mobile/systemd_service.list
@@ -47,7 +47,7 @@
 ;console-shell.service;root;root;System;
 ;container-getty@.service;root;root;System;
 ;contextd.service;service_fw;service_fw;System;
-;crash-service.service;crash_worker;crash_worker;System;
+;crash-service.service;crash_worker;crash_worker;System::Privileged;
 ;csr.service;security_fw;security_fw;System;
 ;cynara.service;cynara;cynara;System;
 ;data-provider-master.service;app_fw;app_fw;System;
diff --git a/test/new_service_test/target/tv/systemd_service.list b/test/new_service_test/target/tv/systemd_service.list
index b5651c831087ca719aa35d81fe6c59f96db02687..77fc4a85dd129d53a47262a3ce8d5ea4f22c1a41 100644 (file)
--- a/test/new_service_test/target/tv/systemd_service.list
+++ b/test/new_service_test/target/tv/systemd_service.list
@@ -36,7 +36,7 @@
 ;console-getty.service;root;root;System;
 ;console-shell.service;root;root;System;
 ;container-getty@.service;root;root;System;
-;crash-service.service;crash_worker;crash_worker;System;
+;crash-service.service;crash_worker;crash_worker;System::Privileged;
 ;csr.service;security_fw;security_fw;System;
 ;cynara.service;cynara;cynara;System;
 ;data-provider-master.service;app_fw;app_fw;System;
diff --git a/test/new_service_test/target/wearable/systemd_service.list b/test/new_service_test/target/wearable/systemd_service.list
index 8858b039ab00dba7d2255563c24d97759fef1063..775f709171a2833de3f83339f06739a3f33f3c30 100755 (executable)
--- a/test/new_service_test/target/wearable/systemd_service.list
+++ b/test/new_service_test/target/wearable/systemd_service.list
@@ -42,7 +42,7 @@
 ;console-shell.service;root;root;System;
 ;container-getty@.service;root;root;System;
 ;contextd.service;service_fw;service_fw;System;
-;crash-service.service;crash_worker;crash_worker;System;
+;crash-service.service;crash_worker;crash_worker;System::Privileged;
 ;csr.service;security_fw;security_fw;System;
 ;cynara.service;cynara;cynara;System;
 ;data-provider-master.service;app_fw;app_fw;System;
Domain: Security / Access Control;