Add new sub domain('System::Privilege') to System domain

This is new sub domain('System::Privileged') for onlycap feature

Change-Id: I7cb403b5b3e4766954f23bf1041347c3191811a1
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>

diff --git a/packaging/default-ac-domains.manifest b/packaging/default-ac-domains.manifest
index 46e869b61e65d93d0d43ca74bb1ef76a8906f2aa..fcd9a7d04f02326cbdef446e9753815c6ccf8f05 100644 (file)
--- a/packaging/default-ac-domains.manifest
+++ b/packaging/default-ac-domains.manifest
@@ -19,15 +19,33 @@
       <smack permit="_" to="System::Run" type="rwxat"/>
     </permit>
   </define>
+  <define>
+    <domain name="System::Privileged" policy="shared"/>
+    <request>
+      <smack request="System" type="rwxat"/>
+      <smack request="System::Shared" type="rwxat"/>
+      <smack request="System::Run" type="rwxat"/>
+      <smack request="System::Log" type="rwxa"/>
+      <smack request="User::Home" type="rwxat"/>
+      <smack request="User::App::Shared" type="rwxat"/>
+      <smack request="_" type="rwx"/>
+    </request>
+    <permit>
+      <smack permit="_" type="wx"/>
+      <smack permit="System" type="rwxat"/>
+    </permit>
+  </define>
   <define>
     <domain name="^" policy="shared"/>
     <request>
       <smack request="System" type="rwxa"/>
+      <smack request="System::Privileged" type="rwxa"/>
       <smack request="System::Run" type="rwxat"/>
       <smack request="System::Log" type="rwxa"/>
     </request>
     <permit>
       <smack permit="System" type="rwxa"/>
+      <smack permit="System::Privileged" type="rwxa"/>
     </permit>
   </define>
   <define>
@@ -38,6 +56,7 @@
     </provide>
     <request>
       <smack request="System" type="wx"/>
+      <smack request="System::Privileged" type="wx"/>
       <smack request="System::Shared" type="rxl"/>
       <smack request="System::Run" type="rwxat"/>
       <smack request="System::Log" type="rwxa"/>
@@ -46,6 +65,7 @@
     </request>
     <permit>
       <smack permit="System" type="rwx"/>
+      <smack permit="System::Privileged" type="rwx"/>
     </permit>
   </define>
   <request>