chmod 600 /opt/share/security-config/dummy_file
%post profile_mobile
-mv %{SECURITY_TEST_DIR}//capability_test/mobile/* %{SECURITY_TEST_DIR}/capability_test/
-mv %{SECURITY_TEST_DIR}//new_service_test/list/mobile/* %{SECURITY_TEST_DIR}/new_service_test/
-rm -r %{SECURITY_TEST_DIR}/capability_test/mobile/
-rm -r %{SECURITY_TEST_DIR}/capability_test/wearable/
-rm -r %{SECURITY_TEST_DIR}/new_service_test/list/
+mv %{SECURITY_TEST_DIR}/capability_test/mobile/* %{SECURITY_TEST_DIR}/capability_test/
+mv %{SECURITY_TEST_DIR}/new_service_test/list/mobile/* %{SECURITY_TEST_DIR}/new_service_test/
+rm -rf %{SECURITY_TEST_DIR}/capability_test/mobile/
+rm -rf %{SECURITY_TEST_DIR}/capability_test/wearable/
+rm -rf %{SECURITY_TEST_DIR}/new_service_test/list/
rm -f /opt/share/askuser_disable
chsmack -a "System::NoUse" /etc/smack/onlycap
mv /usr/share/security-config/mount_list/mobile/additional_mount_list /usr/share/security-config/additional_mount_list
rm -r /usr/share/security-config/mount_list/
-%postun profile_mobile
-rm %{SECURITY_TEST_DIR}/capability_test/*
-rm %{SECURITY_TEST_DIR}/new_service_test/*
-
%post profile_wearable
mv %{SECURITY_TEST_DIR}/capability_test/wearable/* %{SECURITY_TEST_DIR}/capability_test/
mv %{SECURITY_TEST_DIR}/new_service_test/list/wearable/* %{SECURITY_TEST_DIR}/new_service_test/
-rm -r %{SECURITY_TEST_DIR}/capability_test/mobile/
-rm -r %{SECURITY_TEST_DIR}/capability_test/wearable/
-rm -r %{SECURITY_TEST_DIR}/new_service_test/list/
+rm -rf %{SECURITY_TEST_DIR}/capability_test/mobile/
+rm -rf %{SECURITY_TEST_DIR}/capability_test/wearable/
+rm -rf %{SECURITY_TEST_DIR}/new_service_test/list/
rm -f /opt/share/askuser_disable
chsmack -a "System::NoUse" /etc/smack/onlycap
mv /usr/share/security-config/mount_list/wearable/additional_mount_list /usr/share/security-config/additional_mount_list
rm -r /usr/share/security-config/mount_list/
-%postun profile_wearable
-rm %{SECURITY_TEST_DIR}/capability_test/*
-rm %{SECURITY_TEST_DIR}/new_service_test/*
-
%post profile_tv
mv %{SECURITY_TEST_DIR}/new_service_test/list/tv/* %{SECURITY_TEST_DIR}/new_service_test/
rm -r %{SECURITY_TEST_DIR}/new_service_test/list/
mv /usr/share/security-config/mount_list/tv/additional_mount_list /usr/share/security-config/additional_mount_list
rm -r /usr/share/security-config/mount_list/
-%postun profile_tv
-rm %{SECURITY_TEST_DIR}/new_service_test/*
-
%files
%manifest %{_datadir}/%{name}.manifest
%license LICENSE
%attr(755,root,root) /usr/share/security-config/smack_default_labeling
%attr(644,root,root) /etc/smack/onlycap
%attr(755,root,root) %{SECURITY_TEST_DIR}/capability_test/mobile/*
-%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/check_new_service.sh
+%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/*
%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/list/mobile/*
%attr(644,root,root) /usr/share/security-config/mount_list/mobile/*
%attr(755,root,root) /usr/share/security-config/smack_default_labeling
%attr(644,root,root) /etc/smack/onlycap
%attr(755,root,root) %{SECURITY_TEST_DIR}/capability_test/wearable/*
-%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/check_new_service.sh
+%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/*
%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/list/wearable/*
%attr(644,root,root) /usr/share/security-config/mount_list/wearable/*
%files profile_tv
%license LICENSE
-%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/check_new_service.sh
+%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/*
%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/list/tv/*
%attr(644,root,root) /usr/share/security-config/mount_list/tv/*
fi
fi
-# new service test
+# systemd service test
new_service_test="$security_test_path/new_service_test/check_new_service.sh"
new_service_log="$log_path/new_service.log"
if [ -e $new_service_test ]
fi
fi
+
# Print the failed lists in build log
if [ -e "$log_file" ]
then
CMAKE_MINIMUM_REQUIRED(VERSION 2.6)
FILE(GLOB SHELL_SCRIPT *.sh)
+FILE(GLOB TEST_UTIL systemd_test_util)
SET(EMULATOR_LISTS ${CMAKE_SOURCE_DIR}/test/new_service_test/emulator/)
SET(TARGET_LISTS ${CMAKE_SOURCE_DIR}/test/new_service_test/target/)
INSTALL(FILES
${SHELL_SCRIPT}
+ ${TEST_UTIL}
DESTINATION
/usr/share/security-config/test/new_service_test
)
--- /dev/null
+#!/bin/bash
+
+PATH=/bin:/usr/bin:/sbin:/usr/sbin
+source /usr/share/security-config/test/new_service_test/systemd_test_util
+
+result_file="$result_dir/dbus_service.result"
+log_file="$log_dir/dbus_service.log"
+dbus_test_exception_list="$cur_dir/dbus_service.list"
+
+# function to check whether it is included in dbus list files
+# args : $1 - service file path, $2 - exec_arg
+function check_dbus_service
+{
+ service_name="$(echo $1 | rev | cut -f1 -d '/' | rev)"
+ if [ "$2" != "/bin/false" ] && [ "$2" != "/usr/bin/false" ] && [ "$2" != "" ]
+ then
+ check_exception $service_name $dbus_test_exception_list
+ if [ "$?" == 0 ]
+ then
+ echo "Not permitted DBUS Service : $service_name"
+ echo $1 >> $log_file
+ # TODO: Need to be enabled later
+ # move_systemd_unit $1 $service_name
+ fi
+
+ fi
+}
+
+# function to find and check service file in dbus directory
+function find_dbus_service
+{
+ for line in `find "$dbus_service_dir" -type f -name "*service" 2> /dev/null`
+ do
+ exec_arg="$(cat $line | grep "Exec=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ check_dbus_service "$line" "$exec_arg"
+ done
+}
+
+# Initialize
+echo "Run check dbus service test"
+init_test $log_file $result_file
+
+# MAIN
+find_dbus_service
+
+check_result $log_file "dbus services" $result_file
#!/bin/bash
PATH=/bin:/usr/bin:/sbin:/usr/sbin
+source /usr/share/security-config/test/new_service_test/systemd_test_util
+log_file="$log_dir/new_service.log"
+echo "run all systemd test"
-result_file="/opt/share/security-config/result/new_service.result"
-log_file="/opt/share/security-config/log/new_service.log"
-dbus_service_list="/usr/share/security-config/test/new_service_test/dbus_service.list"
-systemd_service_list="/usr/share/security-config/test/new_service_test/systemd_service.list"
-not_permitted_service_path="/opt/share/security-config/not_permitted_service/"
-systemd_service_dir="/usr/lib/systemd/system"
-dbus_service_dir="/usr/share/dbus-1/system-services"
-# function to check whether it is included in systemd list files
-# args : $1 - service file path, $2 - uid, $3 - gid, $4 - smacklabel
-function check_systemd_service
-{
- service_name=$(echo $1 | rev | cut -f1 -d "/" | rev)
- if [ "$2" == "" ]
- then
- uid="root"
- else
- uid="$2"
- fi
- if [ "$3" == "" ]
- then
- gid="root"
- else
- gid="$3"
- fi
- result=$(cat $systemd_service_list | grep "$service_name;$uid;$gid;$4;")
- if [ "$result" == "" ]
- then
- echo "Not permitted Systemd Service : $1"
- echo $1 >> $log_file
- move_service_file $1 $service_name
- fi
-}
-
-# function to check whether it is included in dbus list files
-# args : $1 - service file path, $2 - uid
-function check_dbus_service
-{
- # skip dbus service which has SystemdService option.
- if [ "$(cat $1 | grep 'SystemdService=')" != "" ]
- then
- return
- fi
- service_name=$(echo $1 | rev | cut -f1 -d "/" | rev)
- if [ "$2" == "" ]
- then
- uid="root"
- else
- uid="$2"
- fi
- result=$(cat $dbus_service_list | grep "$service_name;$uid;")
- if [ "$result" == "" ]
- then
- echo "Not permitted DBUS Service : $1"
- echo $1 >> $log_file
- move_service_file $1 $service_name
- fi
-}
-
-# function to move service file to another directory. This service cannot be launched by systemd or d-bus.
-# $1 : service file path, $2 : service file name
-function move_service_file
-{
- # TODO : This is temporary. Checking onlycap may need to be considered later.
- if [ -e "/etc/smack/onlycap" ]
- then
- if [ ! -d $not_permitted_service_path ]
- then
- mkdir $not_permitted_service_path
- fi
- mv "$1" "$not_permitted_service_path$2"
- fi
-}
-
-# function to find and check service file in systemd directory
-function find_systemd_service
-{
- for line in `find "$systemd_service_dir" -type f -name "*service" 2> /dev/null`
- do
- uid="$(cat $line | grep "User=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
- gid="$(cat $line | grep "Group=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
- smacklabel="$(cat $line | grep "SmackProcessLabel=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
- check_systemd_service "$line" "$uid" "$gid" "$smacklabel"
- done
-}
-
-# function to find and check service file in dbus directory
-function find_dbus_service
-{
- for line in `find "$dbus_service_dir" -type f -name "*service" 2> /dev/null`
- do
- uid="$(cat $line | grep "User=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
- check_dbus_service "$line" "$uid"
- done
-}
-
-# Initialize
-echo "Run check new service test"
if [ -e "$log_file" ]
then
- # Restore not permitted service
- for line in `cat $log_file`
- do
- service_name=$(echo $line | rev | cut -f1 -d "/" | rev)
- mv $not_permitted_service_path$service_name $line
- done
rm $log_file
fi
-if [ -e "$result_file" ]
+
+$cur_dir/check_systemd_service.sh
+if [ -e "$log_dir/system_service.log" ]
then
- rm $result_file
+ cat "$log_dir/system_service.log" >> $log_file
fi
-# MAIN
-find_systemd_service
-find_dbus_service
+$cur_dir/check_systemd_socket.sh
+if [ -e "$log_dir/systemd_socket.log" ]
+then
+ cat "$log_dir/systemd_socket.log" >> $log_file
+fi
-if [ ! -e $log_file ]
+$cur_dir/check_dbus_service.sh
+if [ -e "$log_dir/dbus_service.log" ]
then
- echo "Success! All service file is in the list"
- echo "YES" > $result_file
-else
- echo "Fail! Please check the log and "$not_permitted_service_path
- echo "NO" > $result_file
+ cat "$log_dir/dbus_service.log" >> $log_file
fi
--- /dev/null
+#!/bin/bash
+
+PATH=/bin:/usr/bin:/sbin:/usr/sbin
+source /usr/share/security-config/test/new_service_test/systemd_test_util
+
+result_file="$result_dir/system_service.result"
+log_file="$log_dir/system_service.log"
+systemd_service_list="$cur_dir/systemd_service.list"
+
+# function to check whether it is included in systemd list files (system session)
+# args : $1 - service file path, $2 - uid, $3 - gid, $4 - smacklabel
+function check_system_service
+{
+ service_name=$(echo $1 | rev | cut -f1 -d "/" | rev)
+ if [ "$2" == "" ]
+ then
+ uid="root"
+ else
+ uid="$2"
+ fi
+ if [ "$3" == "" ]
+ then
+ gid="root"
+ else
+ gid="$3"
+ fi
+ result=$(cat $systemd_service_list | grep ";$service_name;$uid;$gid;$4;")
+ if [ "$result" == "" ]
+ then
+ echo "Not permitted Systemd Service (system session) : $1"
+ echo $1 >> $log_file
+ move_systemd_unit $1 $service_name
+ fi
+}
+
+# function to check prefix in Exec***=
+# If one of "+", "!", "!!" is included, it will be executed with the elevated privileges.
+# pattern : '^Exec[a-zA-Z]*=[!+]'
+function check_prefix_in_exec
+{
+ service_list_with_prefix=$(grep -n '^Exec[a-zA-Z]*=[!+]' /usr/lib/systemd/system/* | cut -d ":" -f1)
+ for line in $service_list_with_prefix
+ do
+ echo "Not permitted Systemd Service (system session), prefix one of !, !!, + : $line"
+ echo $line >> $log_file
+ move_systemd_unit $line $(echo $line | rev | cut -f1 -d "/" | rev)
+ done
+}
+
+# function to find and check service file in systemd directory (system session)
+function find_system_service
+{
+ for line in `find "$system_unit_dir" -type f -name "*service" 2> /dev/null`
+ do
+ uid="$(cat $line | grep "User=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ gid="$(cat $line | grep "Group=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ smacklabel="$(cat $line | grep "SmackProcessLabel=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ check_system_service "$line" "$uid" "$gid" "$smacklabel"
+ done
+}
+
+# Initialize
+echo "Run check new service test"
+init_test $log_file $result_file
+
+# MAIN
+check_prefix_in_exec
+find_system_service
+
+check_result $log_file "systemd services" $result_file
--- /dev/null
+#!/bin/bash
+
+PATH=/bin:/usr/bin:/sbin:/usr/sbin
+source /usr/share/security-config/test/new_service_test/systemd_test_util
+
+result_file="$result_dir/systemd_socket.result"
+log_file="$log_dir/systemd_socket.log"
+system_socket_list="$cur_dir/system_socket.list"
+
+# function to check whether it is included in systemd socket list file
+# args : $1 - socket unit path, $2 - SocketUser, $3 - SocketGroup, $4 - SocketMode, $5 - $SmackLabelIPIn, $6 - $SmackLabelIPOut
+function check_systemd_socket
+{
+ socket_name=$(echo $1 | rev | cut -f1 -d "/" | rev)
+ result=$(cat $system_socket_list | grep -F ";$socket_name;$2;$3;$4;$5;$6;")
+ if [ "$result" == "" ]
+ then
+ echo "Not permitted Systemd Unit Socket : $socket_name"
+ echo $1 >> $log_file
+ # TODO: Need to be enabled later
+ # move_systemd_unit $1 $socket_name
+ fi
+}
+
+# function to check special cases which a unit file has multiple sockets
+# read each lines of file
+# args : $1 - socket unit path
+function check_multi_socket_case
+{
+ is_first="true"
+ SocketUser=""
+ SocketGroup=""
+ SocketMode=""
+ SmackLabelIPIn=""
+ SmackLabelIPOut=""
+ while read -r line
+ do
+ if [[ "$line" =~ "[Socket]" ]] && [ $is_first == "true" ]
+ then
+ is_first="false"
+ elif [[ "$line" =~ "[Socket]" ]] && [ $is_first == "false" ]
+ then
+ check_systemd_socket "$1" "$SocketUser" "$SocketGroup" "$SocketMode" "$SmackLabelIPIn" "$SmackLabelIPOut"
+ SocketUser=""
+ SocketGroup=""
+ SocketMode=""
+ SmackLabelIPIn=""
+ SmackLabelIPOut=""
+ elif [[ "$line" =~ "SocketUser=" ]]
+ then
+ SocketUser="$(echo $line | grep "SocketUser=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ elif [[ "$line" =~ "SocketGroup=" ]]
+ then
+ SocketGroup="$(echo $line | grep "SocketGroup=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ elif [[ "$line" =~ "SocketMode=" ]]
+ then
+ SocketMode="$(echo $line | grep "SocketMode=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ elif [[ "$line" =~ "SmackLabelIPIn=" ]]
+ then
+ SmackLabelIPIn="$(echo $line | grep "SmackLabelIPIn=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ elif [[ "$line" =~ "SmackLabelIPOut=" ]]
+ then
+ SmackLabelIPOut="$(echo $line | grep "SmackLabelIPOut=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ fi
+ done < $1
+ # last line
+ check_systemd_socket "$1" "$SocketUser" "$SocketGroup" "$SocketMode" "$SmackLabelIPIn" "$SmackLabelIPOut"
+}
+
+# function to find and check service file in systemd directory
+function find_system_socket
+{
+ for line in `find "$system_unit_dir" -type f -name "*.socket" 2> /dev/null`
+ do
+ # check # of [Socket]
+ if [ "$(cat $line | grep '\[Socket\]' | wc -l)" != "1" ]
+ then
+ check_multi_socket_case $line
+ else
+ SocketUser="$(cat $line | grep "SocketUser=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ SocketGroup="$(cat $line | grep "SocketGroup=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ SocketMode="$(cat $line | grep "SocketMode=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ SmackLabelIPIn="$(cat $line | grep "SmackLabelIPIn=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ SmackLabelIPOut="$(cat $line | grep "SmackLabelIPOut=" | grep -v "#" | cut -d "=" -f2 | tr -d '\015')"
+ check_systemd_socket "$line" "$SocketUser" "$SocketGroup" "$SocketMode" "$SmackLabelIPIn" "$SmackLabelIPOut"
+ fi
+ done
+}
+
+# Initialize
+echo "Run check Systemd Unit Socket"
+init_test $log_file $result_file
+
+# MAIN
+find_system_socket
+
+check_result $log_file "systemd sockets" $result_file
+
-net.asp.service;network_fw;
-net.connman.service;network_fw;
-net.connman.vpn.service;network_fw;
-net.inm-manager.service;network_fw;
-net.mdgd.service;network_fw;
-net.netconfig.service;network_fw;
-net.uamd.service;network_fw;
-net.wifidirect.service;network_fw;
-net.wmesh.service;network_fw;
-org.O1.SecurityAccounts.gUserManagement.service;root;
-org.bluez.ag_agent.service;network_fw;
-org.bluez.map_agent.service;root;
-org.bluez.obex.service;network_fw;
-org.bluez.pb_agent.service;root;
-org.freedesktop.hostname1.service;root;
-org.freedesktop.locale1.service;root;
-org.freedesktop.login1.service;root;
-org.freedesktop.systemd1.service;root;
-org.projectx.bt.service;root;
-org.projectx.bt_core.service;root;
-org.tizen.MobileapAgent.service;network_fw;
-org.tizen.PhonenumberUtils.dbus.service;service_fw;
-org.tizen.account.manager.service;root;
-org.tizen.alarm.manager.service;root;
-org.tizen.app2sd.service;root;
-org.tizen.data-provider-master.service;app_fw;
-org.tizen.dpm.syspopup.service;security_fw;
-org.tizen.dummyasm.service;service_fw;
-org.tizen.fido-asm.service;service_fw;
-org.tizen.fido-bt-roaming.service;service_fw;
-org.tizen.fido.service;root;
-org.tizen.lbs.Providers.LbsServer.service;location;
-org.tizen.NetNfcService.service;network_fw;
-org.tizen.orchestration.service;system_fw;
-org.tizen.pkg_recovery.service;root;
-org.tizen.pkgdir_tool.service;root;
-org.tizen.pkgmgr.service;root;
-org.tizen.scmirroring.server.service;multimedia_fw;
-org.tizen.SoundServer.service;root;
-org.tizen.smartreply.service;ui_fw;
-org.tizen.system.crash.service;root;
-org.tizen.system.deviced.service;root;
-org.tizen.system.popup.service;root;
-org.tizen.system.storage.service;root;
-org.tizen.system.vibrator.service;system_fw;
-org.tizen.voice.ttsinterruptserver.service;ui_fw;
-org.tizen.voice.ttsnotiserver.service;ui_fw;
-org.tizen.voice.ttsserver.service;ui_fw;
-org.tizen.voice.ttssrserver.service;ui_fw;
-org.tizen.zigbee.service;network_fw;
--- /dev/null
+;sdbd_tcp.socket;;;;*;@;
+;connman.socket;;;;*;@;
+;systemd-udevd-kernel.socket;;;;;;
+;device-certificate-manager.socket;;;0777;*;@;
+;nfc-manager.socket;;;0777;*;@;
+;cynara-admin.socket;;;0700;@;@;
+;auth-fw-passwd-reset.socket;security_fw;security_fw;0777;*;@;
+;central-key-manager-api-ocsp.socket;;;0777;*;@;
+;msg-server.socket;messaging;messaging;;;;
+;buxton2.socket;;;0777;*;@;
+;device-policy-manager.socket;security_fw;security_fw;0777;*;@;
+;ac.socket;;;0777;;;
+;csr-cs.socket;;;0777;*;@;
+;auth-fw-passwd-check.socket;security_fw;security_fw;0777;*;@;
+;systemd-journald-audit.socket;;;;;;
+;tef-simulator-debugproxy.socket;sdk;security_fw;0660;System::TEF;@;
+;browser-provider.socket;;;0777;;;
+;auth-fw-passwd-policy.socket;security_fw;security_fw;0777;*;@;
+;systemd-udevd-control.socket;;;0600;;;
+;download-provider.socket;;;0777;;;
+;cert-server.socket;security_fw;security_fw;0777;;;
+;ode.socket;;;;*;@;
+;csr-admin.socket;;;0777;*;@;
+;swap_manager.socket;owner;users;;*;@;
+;syslog.socket;;;0666;;;
+;security-manager.socket;;;0777;*;@;
+;tef-simulator.socket;;priv_tee_client;0060;System;@;
+;tef-simulator.socket;;;0770;*;@;
+;systemd-journald-dev-log.socket;;;0666;;;
+;audit-trail.socket;security_fw;security_fw;0755;*;@;
+;auth-fw-passwd-set.socket;security_fw;security_fw;0777;*;@;
+;central-key-manager-api-encryption.socket;;;0777;*;@;
+;sdbd.socket;;;;;;
+;csr-wp.socket;;;0777;*;@;
+;cynara.socket;;;0777;*;@;
+;mediacontroller.socket;multimedia_fw;multimedia_fw;;;;
+;central-key-manager-api-control.socket;;;0777;*;@;
+;usb-host-test.socket;;;;;;
+;systemd-journald.socket;;;0666;;;
+;privacy-guard-server.socket;security_fw;security_fw;0777;;;
+;cynara-monitor-get.socket;;security_fw;0060;@;@;
+;dbus.socket;;;;*;@;
+;cynara-agent.socket;;security_fw;0060;*;@;
+;central-key-manager-api-storage.socket;;;0777;*;@;
+;sensord.socket;sensor;input;0777;*;@;
+;systemd-initctl.socket;;;0600;;;
+;cert-checker.socket;security_fw;security_fw;0777;;;
+
-ac.service;app_fw;app_fw;System;
-accounts-service.service;service_fw;service_fw;System;
-actd.service;root;root;System;
-alarm-server.service;app_fw;app_fw;System;
-app2sd-server.service;root;root;System;
-asp-manager.service;network_fw;network_fw;System;
-audit-trail.service;security_fw;security_fw;System;
-auth-fw.service;security_fw;security_fw;System;
-bluetooth-address.service;network_fw;network_fw;System;
-bluetooth-force-hci-logger.service;network_fw;network_fw;System;
-bluetooth-frwk.service;network_fw;network_fw;System;
-bluetooth-frwk-core.service;network_fw;network_fw;System;
-bluetooth-hci-down.service;network_fw;network_fw;System;
-bluetooth-hci-dump@.service;network_fw;network_fw;System;
-bluetooth-hci-logger.service;network_fw;network_fw;System;
-bluetooth-hci-logger-stop.service;network_fw;network_fw;System;
-bluetooth-hci-up.service;network_fw;network_fw;System;
-bluetooth-map-agent.service;network_fw;network_fw;System;
-bluetooth-pbap-agent.service;network_fw;network_fw;System;
-bluetooth-share.service;network_fw;network_fw;System;
-bluetooth-share-start.service;network_fw;network_fw;System;
-bluetooth-stack-down.service;root;root;System;
-bluetooth-stack-down-with-radio.service;network_fw;network_fw;System;
-bluetooth-stack-up.service;network_fw;network_fw;System;
-bluez-start.service;network_fw;network_fw;System;
-booting-done.service;system_fw;system_fw;System;
-boot-animation.service;application;application;System;
-browser-provider.service;web_fw;web_fw;System;
-buxton2.service;buxton;buxton;System;
-callmgr.service;telephony;telephony;System;
-capi-ui-sticker.service;ui_fw;ui_fw;System;
-capmgr.service;app_fw;app_fw;System;
-central-key-manager.service;key-manager;security_fw;System;
-cert-checker.service;security_fw;security_fw;System;
-cert-server.service;security_fw;security_fw;System;
-chromium-efl.service;root;root;System::Privileged;
-chromium-efl-install.service;web_fw;web_fw;System;
-chromium-efl-update.service;root;root;System::Privileged;
-connman-vpn.service;network_fw;network_fw;System;
-connman.service;network_fw;network_fw;System;
-console-getty.service;root;root;System;
-console-shell.service;root;root;System;
-container-getty@.service;root;root;System;
-contextd.service;service_fw;service_fw;System;
-crash-service.service;crash_worker;crash_worker;System;
-csr.service;security_fw;security_fw;System;
-cynara.service;cynara;cynara;System;
-data-provider-master.service;app_fw;app_fw;System;
-dbus.service;dbus;dbus;System;
-debug-shell.service;root;root;System;
-device-certificate-manager.service;security_fw;security_fw;System;
-device-policy-manager.service;security_fw;security_fw;System;
-device-policy-syspopup.service;security_fw;security_fw;System;
-deviced.service;root;root;System::Privileged;
-display-manager.service;root;root;System;
-display-manager-monitor.service;graphic_fw;graphic_fw;System;
-dlog_cleanup.service;log;log;System;
-dlog_logger.service;log;log;System;
-download-provider.service;web_fw;web_fw;System;
-dummyasm.service;service_fw;service_fw;System;
-edge-orchestration.service;system_fw;system_fw;System;
-emergency.service;root;root;System;
-emuld.service;root;root;System::Privileged;
-emul-common-preinit.service;service_fw;service_fw;System;
-emul-setup-audio-volume.service;service_fw;service_fw;System;
-esd.service;app_fw;app_fw;System;
-faultd.service;root;root;System;
-feedbackd.service;system_fw;system_fw;System;
-fido.service;service_fw;service_fw;System;
-fido-asm.service;service_fw;service_fw;System;
-fido-bt-roaming-agent.service;service_fw;service_fw;System;
-focus-server.service;multimedia_fw;multimedia_fw;System;
-getty@.service;root;root;User::Shell;
-gumd.service;root;root;System::Privileged;
-gumd.service;root;root;System;
-init-update.service;root;root;System::Privileged;
-initrd-cleanup.service;root;root;System;
-initrd-parse-etc.service;root;root;System;
-initrd-switch-root.service;root;root;System;
-initrd-udevadm-cleanup-db.service;root;root;System;
-inm-manager.service;network_fw;network_fw;System;
-kmod-static-nodes.service;root;root;System;
-krate.service;root;root;System;
-lbs-server.service;location;location;System;
-ldconfig.service;root;root;System;
-license-manager-agent.service;security_fw;security_fw;System;
-log_dump.service;root;root;System;
-log_dump.service;system_fw;system_fw;System; # conditionaly used
-mdgd.service;network_fw;network_fw;System;
-media-server.service;multimedia_fw;multimedia_fw;System;
-mediacontroller.service;multimedia_fw;multimedia_fw;System;
-mm-resource-managerd.service;multimedia_fw;multimedia_fw;System;
-mobileap-agent.service;network_fw;network_fw;System;
-msg-server.service;messaging;messaging;System;
-murphyd.service;multimedia_fw;multimedia_fw;System;
-muse-server.service;multimedia_fw;multimedia_fw;System;
-net-config.service;network_fw;network_fw;System;
-nether.service;security_fw;security_fw;System;
-nfc-manager.service;network_fw;network_fw;System;
-ode.service;root;root;System::Privileged;
-ode-progress-ui@.service;application;application;System;
-offline-update.service;root;root;System::Privileged;
-opt-usr-fsck.service;system_fw;disk;System;
-package-manager.service;app_fw;app_fw;System;
-package-recovery.service;app_fw;app_fw;System;
-pass.service;system_fw;system_fw;System;
-phonenumber-utils.service;service_fw;service_fw;System;
-pkg-db-recovery.service;root;root;System;
-pkgdir-tool.service;app_fw;app_fw;System;
-privacy-guard-server.service;security_fw;security_fw;System;
-pulseaudio.service;root;root;System;
-pushd.service;service_fw;service_fw;System;
-quotaon.service;root;root;System;
-rescue.service;root;root;System;
-resize2fs@.service;root;root;System;
-resourced.service;root;root;System;
-rndis.service;network_fw;network_fw;System;
-sdbd.service;sdk;sdk;System;
-sdbd_tcp.service;sdk;sdk;System;
-security-config.service;root;root;System::Privileged;
-security-manager-cleanup.service;root;root;System::Privileged;
-security-manager-rules-loader.service;root;root;System::Privileged;
-security-manager.service;root;root;System::Privileged;
-sensord.service;sensor;input;System;
-serial-getty@.service;root;root;User::Shell;
-shutdown-animation.service;application;application;System;
-sound-server.service;multimedia_fw;multimedia_fw;System;
-stability-monitor.service;stability_monitor;stability_monitor;System;
-stc-iptables.service;network_fw;network_fw;System;
-stc-manager.service;root;root;System;
-storaged.service;root;root;System::Privileged;
-swap_manager.service;system_fw;system_fw;System;
-sys-kernel-tracing.service;system_fw;system_fw;System;
-system-default-target-done.service;system_fw;system_fw;System;
-system-delayed-target-done.service;system_fw;system_fw;System;
-system-delayed-target-trigger.service;root;root;System;
-system-popup.service;system_fw;system_fw;System;
-systemd-ask-password-console.service;root;root;System;
-systemd-ask-password-wall.service;root;root;System;
-systemd-binfmt.service;root;root;System;
-systemd-exit.service;root;root;System;
-systemd-fsck-root.service;root;root;System;
-systemd-fsck@.service;root;root;System;
-systemd-halt.service;root;root;System;
-systemd-hibernate-resume@.service;root;root;System;
-systemd-hibernate.service;root;root;System;
-systemd-hwdb-update.service;root;root;System;
-systemd-hybrid-sleep.service;root;root;System;
-systemd-initctl.service;root;root;System;
-systemd-journal-catalog-update.service;root;root;System;
-systemd-journal-flush.service;root;root;System;
-systemd-journald.service;root;root;System;
-systemd-kexec.service;root;root;System;
-systemd-localed.service;root;root;System;
-systemd-logind.service;root;root;System::Privileged;
-systemd-machine-id-commit.service;root;root;System;
-systemd-modules-load.service;root;root;System;
-systemd-nspawn@.service;root;root;System;
-systemd-poweroff.service;root;root;System;
-systemd-quotacheck.service;root;root;System;
-systemd-reboot.service;root;root;System;
-systemd-remount-fs.service;root;root;System;
-systemd-suspend.service;root;root;System;
-systemd-sysctl.service;root;root;System;
-systemd-tmpfiles-setup-dev.service;root;root;System::Privileged;
-systemd-tmpfiles-setup.service;root;root;System::Privileged;
-systemd-udev-settle.service;root;root;System;
-systemd-udev-trigger.service;root;root;System;
-systemd-udevd.service;root;root;System::Privileged;
-systemd-update-done.service;root;root;System;
-systemd-update-utmp-runlevel.service;root;root;System;
-systemd-update-utmp.service;root;root;System;
-systemd-user-sessions.service;root;root;System;
-systemd-vconsole-setup.service;root;root;System;
-tef-simulator.service;security_fw;security_fw;System::TEF;
-telephony-daemon.service;telephony;telephony;System;
-tizen-system-env.service;root;root;System;
-tizenid.service;system_fw;system_fw;System;
-tlm.service;root;root;User;
-ttrace-marker.service;system_fw;system_fw;System;
-ua-manager.service;network_fw;network_fw;System;
-udev-sdb-init.service;root;root;System;
-usb-host-ffs-test-daemon.service;system_fw;system_fw;System;
-user@.service;%i;users;User;
-__user@.service;%i;;User;
-vmodem-x86.service;root;root;System::Privileged;
-wait-mount@.service;system_fw;system_fw;System;
-webappenc-initializer.service;security_fw;security_fw;System;
-wifi-direct-manager.service;network_fw;network_fw;System;
-wmeshd.service;network_fw;network_fw;System
-zigbee-daemon.service;network_fw;network_fw;System
+;ac.service;app_fw;app_fw;System;
+;accounts-service.service;service_fw;service_fw;System;
+;actd.service;root;root;System;
+;alarm-server.service;app_fw;app_fw;System;
+;app2sd-server.service;root;root;System;
+;asp-manager.service;network_fw;network_fw;System;
+;audit-trail.service;security_fw;security_fw;System;
+;auth-fw.service;security_fw;security_fw;System;
+;bluetooth-address.service;network_fw;network_fw;System;
+;bluetooth-force-hci-logger.service;network_fw;network_fw;System;
+;bluetooth-frwk.service;network_fw;network_fw;System;
+;bluetooth-frwk-core.service;network_fw;network_fw;System;
+;bluetooth-hci-down.service;network_fw;network_fw;System;
+;bluetooth-hci-dump@.service;network_fw;network_fw;System;
+;bluetooth-hci-logger.service;network_fw;network_fw;System;
+;bluetooth-hci-logger-stop.service;network_fw;network_fw;System;
+;bluetooth-hci-up.service;network_fw;network_fw;System;
+;bluetooth-map-agent.service;network_fw;network_fw;System;
+;bluetooth-pbap-agent.service;network_fw;network_fw;System;
+;bluetooth-share.service;network_fw;network_fw;System;
+;bluetooth-share-start.service;network_fw;network_fw;System;
+;bluetooth-stack-down.service;root;root;System;
+;bluetooth-stack-down-with-radio.service;network_fw;network_fw;System;
+;bluetooth-stack-up.service;network_fw;network_fw;System;
+;bluez-start.service;network_fw;network_fw;System;
+;booting-done.service;system_fw;system_fw;System;
+;boot-animation.service;application;application;System;
+;browser-provider.service;web_fw;web_fw;System;
+;buxton2.service;buxton;buxton;System;
+;callmgr.service;telephony;telephony;System;
+;capi-ui-sticker.service;ui_fw;ui_fw;System;
+;capmgr.service;app_fw;app_fw;System;
+;central-key-manager.service;key-manager;security_fw;System;
+;cert-checker.service;security_fw;security_fw;System;
+;cert-server.service;security_fw;security_fw;System;
+;chromium-efl.service;root;root;System::Privileged;
+;chromium-efl-install.service;web_fw;web_fw;System;
+;chromium-efl-update.service;root;root;System::Privileged;
+;connman-vpn.service;network_fw;network_fw;System;
+;connman.service;network_fw;network_fw;System;
+;console-getty.service;root;root;System;
+;console-shell.service;root;root;System;
+;container-getty@.service;root;root;System;
+;contextd.service;service_fw;service_fw;System;
+;crash-service.service;crash_worker;crash_worker;System;
+;csr.service;security_fw;security_fw;System;
+;cynara.service;cynara;cynara;System;
+;data-provider-master.service;app_fw;app_fw;System;
+;dbus.service;dbus;dbus;System;
+;debug-shell.service;root;root;System;
+;device-certificate-manager.service;security_fw;security_fw;System;
+;device-policy-manager.service;security_fw;security_fw;System;
+;device-policy-syspopup.service;security_fw;security_fw;System;
+;deviced.service;root;root;System::Privileged;
+;display-manager.service;root;root;System;
+;display-manager-monitor.service;graphic_fw;graphic_fw;System;
+;dlog_cleanup.service;log;log;System;
+;dlog_logger.service;log;log;System;
+;download-provider.service;web_fw;web_fw;System;
+;dummyasm.service;service_fw;service_fw;System;
+;edge-orchestration.service;system_fw;system_fw;System;
+;emergency.service;root;root;System;
+;emuld.service;root;root;System::Privileged;
+;emul-common-preinit.service;service_fw;service_fw;System;
+;emul-setup-audio-volume.service;service_fw;service_fw;System;
+;esd.service;app_fw;app_fw;System;
+;faultd.service;root;root;System;
+;feedbackd.service;system_fw;system_fw;System;
+;fido.service;service_fw;service_fw;System;
+;fido-asm.service;service_fw;service_fw;System;
+;fido-bt-roaming-agent.service;service_fw;service_fw;System;
+;focus-server.service;multimedia_fw;multimedia_fw;System;
+;getty@.service;root;root;User::Shell;
+;gumd.service;root;root;System::Privileged;
+;gumd.service;root;root;System;
+;init-update.service;root;root;System::Privileged;
+;initrd-cleanup.service;root;root;System;
+;initrd-parse-etc.service;root;root;System;
+;initrd-switch-root.service;root;root;System;
+;initrd-udevadm-cleanup-db.service;root;root;System;
+;inm-manager.service;network_fw;network_fw;System;
+;kmod-static-nodes.service;root;root;System;
+;krate.service;root;root;System;
+;lbs-server.service;location;location;System;
+;ldconfig.service;root;root;System;
+;license-manager-agent.service;security_fw;security_fw;System;
+;log_dump.service;root;root;System;
+;log_dump.service;system_fw;system_fw;System; # conditionaly used
+;mdgd.service;network_fw;network_fw;System;
+;media-server.service;multimedia_fw;multimedia_fw;System;
+;mediacontroller.service;multimedia_fw;multimedia_fw;System;
+;mm-resource-managerd.service;multimedia_fw;multimedia_fw;System;
+;mobileap-agent.service;network_fw;network_fw;System;
+;msg-server.service;messaging;messaging;System;
+;murphyd.service;multimedia_fw;multimedia_fw;System;
+;muse-server.service;multimedia_fw;multimedia_fw;System;
+;net-config.service;network_fw;network_fw;System;
+;nether.service;security_fw;security_fw;System;
+;nfc-manager.service;network_fw;network_fw;System;
+;ode.service;root;root;System::Privileged;
+;ode-progress-ui@.service;application;application;System;
+;offline-update.service;root;root;System::Privileged;
+;opt-usr-fsck.service;system_fw;disk;System;
+;package-manager.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System;
+;pass.service;system_fw;system_fw;System;
+;phonenumber-utils.service;service_fw;service_fw;System;
+;pkg-db-recovery.service;root;root;System;
+;pkgdir-tool.service;app_fw;app_fw;System;
+;privacy-guard-server.service;security_fw;security_fw;System;
+;pulseaudio.service;root;root;System;
+;pushd.service;service_fw;service_fw;System;
+;quotaon.service;root;root;System;
+;rescue.service;root;root;System;
+;resize2fs@.service;root;root;System;
+;resourced.service;root;root;System;
+;rndis.service;network_fw;network_fw;System;
+;sdbd.service;sdk;sdk;System;
+;sdbd_tcp.service;sdk;sdk;System;
+;security-config.service;root;root;System::Privileged;
+;security-manager-cleanup.service;root;root;System::Privileged;
+;security-manager-rules-loader.service;root;root;System::Privileged;
+;security-manager.service;root;root;System::Privileged;
+;sensord.service;sensor;input;System;
+;serial-getty@.service;root;root;User::Shell;
+;shutdown-animation.service;application;application;System;
+;sound-server.service;multimedia_fw;multimedia_fw;System;
+;stability-monitor.service;stability_monitor;stability_monitor;System;
+;stc-iptables.service;network_fw;network_fw;System;
+;stc-manager.service;root;root;System;
+;storaged.service;root;root;System::Privileged;
+;swap_manager.service;system_fw;system_fw;System;
+;sys-kernel-tracing.service;system_fw;system_fw;System;
+;system-default-target-done.service;system_fw;system_fw;System;
+;system-delayed-target-done.service;system_fw;system_fw;System;
+;system-delayed-target-trigger.service;root;root;System;
+;system-popup.service;system_fw;system_fw;System;
+;systemd-ask-password-console.service;root;root;System;
+;systemd-ask-password-wall.service;root;root;System;
+;systemd-binfmt.service;root;root;System;
+;systemd-exit.service;root;root;System;
+;systemd-fsck-root.service;root;root;System;
+;systemd-fsck@.service;root;root;System;
+;systemd-halt.service;root;root;System;
+;systemd-hibernate-resume@.service;root;root;System;
+;systemd-hibernate.service;root;root;System;
+;systemd-hwdb-update.service;root;root;System;
+;systemd-hybrid-sleep.service;root;root;System;
+;systemd-initctl.service;root;root;System;
+;systemd-journal-catalog-update.service;root;root;System;
+;systemd-journal-flush.service;root;root;System;
+;systemd-journald.service;root;root;System;
+;systemd-kexec.service;root;root;System;
+;systemd-localed.service;root;root;System;
+;systemd-logind.service;root;root;System::Privileged;
+;systemd-machine-id-commit.service;root;root;System;
+;systemd-modules-load.service;root;root;System;
+;systemd-nspawn@.service;root;root;System;
+;systemd-poweroff.service;root;root;System;
+;systemd-quotacheck.service;root;root;System;
+;systemd-reboot.service;root;root;System;
+;systemd-remount-fs.service;root;root;System;
+;systemd-suspend.service;root;root;System;
+;systemd-sysctl.service;root;root;System;
+;systemd-tmpfiles-setup-dev.service;root;root;System::Privileged;
+;systemd-tmpfiles-setup.service;root;root;System::Privileged;
+;systemd-udev-settle.service;root;root;System;
+;systemd-udev-trigger.service;root;root;System;
+;systemd-udevd.service;root;root;System::Privileged;
+;systemd-update-done.service;root;root;System;
+;systemd-update-utmp-runlevel.service;root;root;System;
+;systemd-update-utmp.service;root;root;System;
+;systemd-user-sessions.service;root;root;System;
+;systemd-vconsole-setup.service;root;root;System;
+;tef-simulator.service;security_fw;security_fw;System::TEF;
+;telephony-daemon.service;telephony;telephony;System;
+;tizen-system-env.service;root;root;System;
+;tizenid.service;system_fw;system_fw;System;
+;tlm.service;root;root;User;
+;ttrace-marker.service;system_fw;system_fw;System;
+;ua-manager.service;network_fw;network_fw;System;
+;udev-sdb-init.service;root;root;System;
+;usb-host-ffs-test-daemon.service;system_fw;system_fw;System;
+;user@.service;%i;users;User;
+;__user@.service;%i;;User;
+;vmodem-x86.service;root;root;System::Privileged;
+;wait-mount@.service;system_fw;system_fw;System;
+;webappenc-initializer.service;security_fw;security_fw;System;
+;wifi-direct-manager.service;network_fw;network_fw;System;
+;wmeshd.service;network_fw;network_fw;System;
+;zigbee-daemon.service;network_fw;network_fw;System;
-net.asp.service;network_fw;
-net.connman.service;network_fw;
-net.inm-manager.service;network_fw;
-net.mdgd.service;network_fw;
-net.netconfig.service;network_fw;
-net.uamd.service;network_fw;
-net.wmesh.service;network_fw;
-org.O1.SecurityAccounts.gUserManagement.service;root;
-org.bluez.obex.service;network_fw;
-org.freedesktop.hostname1.service;root;
-org.freedesktop.locale1.service;root;
-org.freedesktop.login1.service;root;
-org.freedesktop.systemd1.service;root;
-org.projectx.bt.service;root;
-org.projectx.bt_core.service;root;
-org.tizen.MobileapAgent.service;network_fw;
-org.tizen.PhonenumberUtils.dbus.service;service_fw;
-org.tizen.SoundServer.service;root;
-org.tizen.alarm.manager.service;root;
-org.tizen.data-provider-master.service;app_fw;
-org.tizen.dpm.syspopup.service;security_fw;
-org.tizen.dummyasm.service;service_fw;
-org.tizen.fido-asm.service;service_fw;
-org.tizen.fido-bt-roaming.service;service_fw;
-org.tizen.fido.service;root;
-org.tizen.pkg_recovery.service;root;
-org.tizen.pkgdir_tool.service;root;
-org.tizen.pkgmgr.service;root;
-org.tizen.scmirroring.server.service;multimedia_fw;
-org.tizen.smartreply.service;ui_fw;
-org.tizen.system.crash.service;root;
-org.tizen.system.deviced.service;root;
-org.tizen.system.storage.service;root;
-org.tizen.voice.ttsinterruptserver.service;ui_fw;
-org.tizen.voice.ttsnotiserver.service;ui_fw;
-org.tizen.voice.ttsserver.service;ui_fw;
-org.tizen.voice.ttssrserver.service;ui_fw;
-org.tizen.zigbee.service;network_fw;
-org.bluez.service;root;
-ac.service;app_fw;app_fw;System;
-actd.service;root;root;System;
-alarm-server.service;app_fw;app_fw;System;
-asp-manager.service;network_fw;network_fw;System;
-audit-trail.service;security_fw;security_fw;System;
-auth-fw.service;security_fw;security_fw;System;
-bluetooth.service;network_fw;network_fw;System;
-bluetooth-address.service;network_fw;network_fw;System;
-bluetooth-force-hci-logger.service;network_fw;network_fw;System;
-bluetooth-frwk.service;network_fw;network_fw;System;
-bluetooth-frwk-core.service;network_fw;network_fw;System;
-bluetooth-hci-down.service;network_fw;network_fw;System;
-bluetooth-hci-dump@.service;network_fw;network_fw;System;
-bluetooth-hci-logger.service;network_fw;network_fw;System;
-bluetooth-hci-logger-stop.service;network_fw;network_fw;System;
-bluetooth-hci-up.service;network_fw;network_fw;System;
-bluetooth-share-start.service;network_fw;network_fw;System;
-bluetooth-stack-down.service;root;root;System;
-bluetooth-stack-up.service;network_fw;network_fw;System;
-bluez-start.service;network_fw;network_fw;System;
-booting-done.service;system_fw;system_fw;System;
-browser-provider.service;web_fw;web_fw;System;
-buxton2.service;buxton;buxton;System;
-capi-ui-sticker.service;ui_fw;ui_fw;System;
-capmgr.service;app_fw;app_fw;System;
-central-key-manager.service;key-manager;security_fw;System;
-cert-server.service;security_fw;security_fw;System;
-chromium-efl.service;root;root;System::Privileged;
-chromium-efl-install.service;web_fw;web_fw;System;
-chromium-efl-update.service;root;root;System::Privileged;
-connman.service;network_fw;network_fw;System;
-console-getty.service;root;root;System;
-console-shell.service;root;root;System;
-container-getty@.service;root;root;System;
-crash-service.service;crash_worker;crash_worker;System;
-csr.service;security_fw;security_fw;System;
-cynara.service;cynara;cynara;System;
-data-provider-master.service;app_fw;app_fw;System;
-dbus.service;dbus;dbus;System;
-debug-shell.service;root;root;System;
-device-certificate-manager.service;security_fw;security_fw;System;
-device-policy-manager.service;security_fw;security_fw;System;
-device-policy-syspopup.service;security_fw;security_fw;System;
-deviced.service;root;root;System::Privileged;
-display-manager.service;root;root;System;
-display-manager-monitor.service;graphic_fw;graphic_fw;System;
-dlog_cleanup.service;log;log;System;
-dlog_logger.service;log;log;System;
-download-provider.service;web_fw;web_fw;System;
-dummyasm.service;service_fw;service_fw;System;
-emergency.service;root;root;System;
-emuld.service;root;root;System::Privileged;
-emul-common-preinit.service;service_fw;service_fw;System;
-emul-setup-audio-volume.service;service_fw;service_fw;System;
-esd.service;app_fw;app_fw;System;
-fido.service;service_fw;service_fw;System;
-fido-asm.service;service_fw;service_fw;System;
-fido-bt-roaming-agent.service;service_fw;service_fw;System;
-focus-server.service;multimedia_fw;multimedia_fw;System;
-getty@.service;root;root;User::Shell;
-gumd.service;root;root;System::Privileged;
-gumd.service;root;root;System;
-init-update.service;root;root;System::Privileged;
-initrd-cleanup.service;root;root;System;
-initrd-parse-etc.service;root;root;System;
-initrd-switch-root.service;root;root;System;
-initrd-udevadm-cleanup-db.service;root;root;System;
-inm-manager.service;network_fw;network_fw;System;
-kmod-static-nodes.service;root;root;System;
-lbs-server.service;location;location;System;
-ldconfig.service;root;root;System;
-license-manager-agent.service;security_fw;security_fw;System;
-log_dump.service;root;root;System;
-log_dump.service;system_fw;system_fw;System; # conditionaly used
-mdgd.service;network_fw;network_fw;System;
-media-server.service;multimedia_fw;multimedia_fw;System;
-mediacontroller.service;multimedia_fw;multimedia_fw;System;
-mm-resource-managerd.service;multimedia_fw;multimedia_fw;System;
-mobileap-agent.service;network_fw;network_fw;System;
-murphyd.service;multimedia_fw;multimedia_fw;System;
-muse-server.service;multimedia_fw;multimedia_fw;System;
-net-config.service;network_fw;network_fw;System;
-nether.service;security_fw;security_fw;System;
-ode.service;root;root;System::Privileged;
-ode-progress-ui@.service;application;application;System;
-offline-update.service;root;root;System::Privileged;
-opt-usr-fsck.service;system_fw;disk;System;
-package-manager.service;app_fw;app_fw;System;
-package-recovery.service;app_fw;app_fw;System;
-pass.service;system_fw;system_fw;System;
-phonenumber-utils.service;service_fw;service_fw;System;
-pkg-db-recovery.service;root;root;System;
-pkgdir-tool.service;app_fw;app_fw;System;
-privacy-guard-server.service;security_fw;security_fw;System;
-pulseaudio.service;root;root;System;
-pushd.service;service_fw;service_fw;System;
-quotaon.service;root;root;System;
-rescue.service;root;root;System;
-resize2fs@.service;root;root;System;
-resourced.service;root;root;System;
-rndis.service;network_fw;network_fw;System;
-sdbd.service;sdk;sdk;System;
-sdbd_tcp.service;sdk;sdk;System;
-security-manager-cleanup.service;root;root;System::Privileged;
-security-manager-rules-loader.service;root;root;System::Privileged;
-security-manager.service;root;root;System::Privileged;
-serial-getty@.service;root;root;User::Shell;
-sound-server.service;multimedia_fw;multimedia_fw;System;
-stability-monitor.service;stability_monitor;stability_monitor;System;
-stc-iptables.service;network_fw;network_fw;System;
-stc-manager.service;root;root;System;
-storaged.service;root;root;System::Privileged;
-swap_manager.service;system_fw;system_fw;System;
-sys-kernel-tracing.service;system_fw;system_fw;System;
-system-default-target-done.service;system_fw;system_fw;System;
-system-delayed-target-done.service;system_fw;system_fw;System;
-system-delayed-target-trigger.service;root;root;System;
-systemd-ask-password-console.service;root;root;System;
-systemd-ask-password-wall.service;root;root;System;
-systemd-binfmt.service;root;root;System;
-systemd-exit.service;root;root;System;
-systemd-fsck-root.service;root;root;System;
-systemd-fsck@.service;root;root;System;
-systemd-halt.service;root;root;System;
-systemd-hibernate-resume@.service;root;root;System;
-systemd-hibernate.service;root;root;System;
-systemd-hwdb-update.service;root;root;System;
-systemd-hybrid-sleep.service;root;root;System;
-systemd-initctl.service;root;root;System;
-systemd-journal-catalog-update.service;root;root;System;
-systemd-journal-flush.service;root;root;System;
-systemd-journald.service;root;root;System;
-systemd-kexec.service;root;root;System;
-systemd-localed.service;root;root;System;
-systemd-logind.service;root;root;System::Privileged;
-systemd-machine-id-commit.service;root;root;System;
-systemd-modules-load.service;root;root;System;
-systemd-nspawn@.service;root;root;System;
-systemd-poweroff.service;root;root;System;
-systemd-quotacheck.service;root;root;System;
-systemd-reboot.service;root;root;System;
-systemd-remount-fs.service;root;root;System;
-systemd-suspend.service;root;root;System;
-systemd-sysctl.service;root;root;System;
-systemd-tmpfiles-setup.service;root;root;System::Privileged;
-systemd-tmpfiles-setup-dev.service;root;root;System::Privileged;
-systemd-udev-settle.service;root;root;System;
-systemd-udev-trigger.service;root;root;System;
-systemd-udevd.service;root;root;System::Privileged;
-systemd-update-done.service;root;root;System;
-systemd-update-utmp-runlevel.service;root;root;System;
-systemd-update-utmp.service;root;root;System;
-systemd-user-sessions.service;root;root;System;
-systemd-vconsole-setup.service;root;root;System;
-tef-simulator.service;security_fw;security_fw;System::TEF;
-telephony-daemon.service;telephony;telephony;System;
-tizen-system-env.service;root;root;System;
-tizenid.service;system_fw;system_fw;System;
-tlm.service;root;root;User;
-ttrace-marker.service;system_fw;system_fw;System;
-ua-manager.service;network_fw;networkf_w;System;
-udev-sdb-init.service;root;root;System;
-usb-host-ffs-test-daemon.service;system_fw;system_fw;System;
-user@.service;%i;users;User;
-__user@.service;%i;;User;
-wait-mount@.service;system_fw;system_fw;System;
-webappenc-initializer.service;security_fw;security_fw;System;
-wifi-direct-manager.service;network_fw;network_fw;System;
-wmeshd.service;network_fw;network_fw;System
-zigbee-daemon.service;network_fw;network_fw;System
-bluetooth.service;root;root;System; # need to be checked by service file verification
-net.asp.service;network_fw;
-net.connman.service;network_fw;
-net.inm-manager.service;network_fw;
-net.mdgd.service;network_fw;
-net.netconfig.service;network_fw;
-net.uamd.service;network_fw;
-net.wmesh.service;network_fw;
-org.O1.SecurityAccounts.gUserManagement.service;root;
-org.bluez.ag_agent.service;network_fw;
-org.bluez.hid_agent.service;network_fw;
-org.bluez.hf_agent.service;root;
-org.bluez.obex.service;network_fw;
-org.freedesktop.hostname1.service;root;
-org.freedesktop.locale1.service;root;
-org.freedesktop.login1.service;root;
-org.freedesktop.systemd1.service;root;
-org.projectx.bt.service;root;
-org.projectx.bt_core.service;root;
-org.tizen.MobileapAgent.service;network_fw;
-org.tizen.PhonenumberUtils.dbus.service;service_fw;
-org.tizen.SoundServer.service;root;
-org.tizen.account.manager.service;root;
-org.tizen.alarm.manager.service;root;
-org.tizen.data-provider-master.service;app_fw;
-org.tizen.dpm.syspopup.service;security_fw;
-org.tizen.dummyasm.service;service_fw;
-org.tizen.fido-asm.service;service_fw;
-org.tizen.fido-bt-roaming.service;service_fw;
-org.tizen.fido.service;root;
-org.tizen.lbs.Providers.LbsServer.service;location;
-org.tizen.NetNfcService.service;network_fw;
-org.tizen.pkg_recovery.service;root;
-org.tizen.pkgdir_tool.service;root;
-org.tizen.pkgmgr.service;root;
-org.tizen.smartreply.service;ui_fw;
-org.tizen.system.crash.service;root;
-org.tizen.system.deviced.service;root;
-org.tizen.system.popup.service;root;
-org.tizen.system.storage.service;root;
-org.tizen.system.vibrator.service;system_fw;
-org.tizen.voice.ttsinterruptserver.service;ui_fw;
-org.tizen.voice.ttsnotiserver.service;ui_fw;
-org.tizen.voice.ttsserver.service;ui_fw;
-org.tizen.voice.ttssrserver.service;ui_fw;
-org.tizen.zigbee.service;network_fw;
--- /dev/null
+;systemd-initctl.socket;;;0600;;;
+;device-policy-manager.socket;security_fw;security_fw;0777;*;@;
+;syslog.socket;;;0666;;;
+;connman.socket;;;;*;@;
+;cynara-agent.socket;;security_fw;0060;*;@;
+;cynara-monitor-get.socket;;security_fw;0060;@;@;
+;device-certificate-manager.socket;;;0777;*;@;
+;csr-wp.socket;;;0777;*;@;
+;cynara-admin.socket;;;0700;@;@;
+;central-key-manager-api-ocsp.socket;;;0777;*;@;
+;sensord.socket;sensor;input;0777;*;@;
+;central-key-manager-api-control.socket;;;0777;*;@;
+;csr-cs.socket;;;0777;*;@;
+;auth-fw-passwd-reset.socket;security_fw;security_fw;0777;*;@;
+;systemd-journald-audit.socket;;;;;;
+;systemd-udevd-kernel.socket;;;;;;
+;download-provider.socket;;;0777;;;
+;systemd-journald-dev-log.socket;;;0666;;;
+;central-key-manager-api-encryption.socket;;;0777;*;@;
+;ode.socket;;;;*;@;
+;dbus.socket;;;;*;@;
+;auth-fw-passwd-check.socket;security_fw;security_fw;0777;*;@;
+;audit-trail.socket;security_fw;security_fw;0755;*;@;
+;usb-host-test.socket;;;;;;
+;cert-server.socket;security_fw;security_fw;0777;;;
+;systemd-journald.socket;;;0666;;;
+;central-key-manager-api-storage.socket;;;0777;*;@;
+;sdbd.socket;;;;;;
+;nfc-manager.socket;;;0777;*;@;
+;tef-simulator.socket;;priv_tee_client;0060;System;@;
+;tef-simulator.socket;;;0770;*;@;
+;systemd-udevd-control.socket;;;0600;;;
+;buxton2.socket;;;0777;*;@;
+;sdbd_tcp.socket;;;;*;@;
+;tef-simulator-debugproxy.socket;sdk;security_fw;0660;System::TEF;@;
+;ac.socket;;;0777;;;
+;msg-server.socket;messaging;messaging;;;;
+;csr-admin.socket;;;0777;*;@;
+;swap_manager.socket;owner;users;;*;@;
+;cynara.socket;;;0777;*;@;
+;security-manager.socket;;;0777;*;@;
+;auth-fw-passwd-policy.socket;security_fw;security_fw;0777;*;@;
+;mediacontroller.socket;multimedia_fw;multimedia_fw;;;;
+;auth-fw-passwd-set.socket;security_fw;security_fw;0777;*;@;
+
-ac.service;app_fw;app_fw;System;
-accounts-service.service;service_fw;service_fw;System;
-actd.service;root;root;System;
-alarm-server.service;app_fw;app_fw;System;
-asp-manager.service;network_fw;network_fw;System;
-audit-trail.service;security_fw;security_fw;System;
-auth-fw.service;security_fw;security_fw;System;
-batterymonitor.service;service_fw;service_fw;System;
-bluetooth-address.service;network_fw;network_fw;System;
-bluetooth-force-hci-logger.service;network_fw;network_fw;System;
-bluetooth-frwk.service;network_fw;network_fw;System;
-bluetooth-frwk-core.service;network_fw;network_fw;System;
-bluetooth-hci-down.service;network_fw;network_fw;System;
-bluetooth-hci-dump@.service;network_fw;network_fw;System;
-bluetooth-hci-logger.service;network_fw;network_fw;System;
-bluetooth-hci-logger-stop.service;network_fw;network_fw;System;
-bluetooth-hci-up.service;network_fw;network_fw;System;
-bluetooth-share-start.service;network_fw;network_fw;System;
-bluetooth-stack-down.service;root;root;System;
-bluetooth-stack-up.service;network_fw;network_fw;System;
-bluez-start.service;network_fw;network_fw;System;
-booting-done.service;system_fw;system_fw;System;
-boot-animation.service;application;application;System;
-buxton2.service;buxton;buxton;System;
-callmgr.service;telephony;telephony;System;
-capi-ui-sticker.service;ui_fw;ui_fw;System;
-capmgr.service;app_fw;app_fw;System;
-central-key-manager.service;key-manager;security_fw;System;
-cert-server.service;security_fw;security_fw;System;
-chromium-efl.service;root;root;System::Privileged;
-chromium-efl-install.service;web_fw;web_fw;System;
-chromium-efl-update.service;root;root;System::Privileged;
-connman.service;network_fw;network_fw;System;
-console-getty.service;root;root;System;
-console-shell.service;root;root;System;
-container-getty@.service;root;root;System;
-contextd.service;service_fw;service_fw;System;
-crash-service.service;crash_worker;crash_worker;System;
-csr.service;security_fw;security_fw;System;
-cynara.service;cynara;cynara;System;
-data-provider-master.service;app_fw;app_fw;System;
-dbus.service;dbus;dbus;System;
-debug-shell.service;root;root;System;
-device-certificate-manager.service;security_fw;security_fw;System;
-device-policy-manager.service;security_fw;security_fw;System;
-device-policy-syspopup.service;security_fw;security_fw;System;
-deviced.service;root;root;System::Privileged;
-display-manager.service;root;root;System;
-display-manager-monitor.service;graphic_fw;graphic_fw;System;
-dlog_cleanup.service;log;log;System;
-dlog_logger.service;log;log;System;
-download-provider.service;web_fw;web_fw;System;
-dummyasm.service;service_fw;service_fw;System;
-emergency.service;root;root;System;
-emuld.service;root;root;System::Privileged;
-emul-common-preinit.service;service_fw;service_fw;System;
-emul-setup-audio-volume.service;service_fw;service_fw;System;
-esd.service;app_fw;app_fw;System;
-faultd.service;root;root;System;
-feedbackd.service;system_fw;system_fw;System;
-fido.service;service_fw;service_fw;System;
-fido-asm.service;service_fw;service_fw;System;
-fido-bt-roaming-agent.service;service_fw;service_fw;System;
-focus-server.service;multimedia_fw;multimedia_fw;System;
-getty@.service;root;root;User::Shell;
-gumd.service;root;root;System::Privileged;
-gumd.service;root;root;System;
-init-update.service;root;root;System::Privileged;
-initrd-cleanup.service;root;root;System;
-initrd-parse-etc.service;root;root;System;
-initrd-switch-root.service;root;root;System;
-initrd-udevadm-cleanup-db.service;root;root;System;
-inm-manager.service;network_fw;network_fw;System;
-kmod-static-nodes.service;root;root;System;
-krate.service;root;root;System;
-lbs-server.service;location;location;System;
-ldconfig.service;root;root;System;
-license-manager-agent.service;security_fw;security_fw;System;
-log_dump.service;root;root;System;
-log_dump.service;system_fw;system_fw;System; # conditionaly used
-mdgd.service;network_fw;network_fw;System;
-media-server.service;multimedia_fw;multimedia_fw;System;
-mediacontroller.service;multimedia_fw;multimedia_fw;System;
-mm-resource-managerd.service;multimedia_fw;multimedia_fw;System;
-mobileap-agent.service;network_fw;network_fw;System;
-msg-server.service;messaging;messaging;System;
-mtp-initiator.service;network_fw;network_fw;System;
-mtp-responder.service;network_fw;network_fw;System;
-murphyd.service;multimedia_fw;multimedia_fw;System;
-muse-server.service;multimedia_fw;multimedia_fw;System;
-net-config.service;network_fw;network_fw;System;
-nether.service;security_fw;security_fw;System;
-nfc-manager.service;network_fw;network_fw;System;
-obex.service;network_fw;network_fw;;
-ode.service;root;root;System::Privileged;
-ode-progress-ui@.service;application;application;System;
-offline-update.service;root;root;System::Privileged;
-opt-usr-fsck.service;system_fw;disk;System;
-package-manager.service;app_fw;app_fw;System;
-package-recovery.service;app_fw;app_fw;System;
-pass.service;system_fw;system_fw;System;
-phonenumber-utils.service;service_fw;service_fw;System;
-pkg-db-recovery.service;root;root;System;
-pkgdir-tool.service;app_fw;app_fw;System;
-privacy-guard-server.service;security_fw;security_fw;System;
-pulseaudio.service;root;root;System;
-pushd.service;service_fw;service_fw;System;
-quotaon.service;root;root;System;
-rescue.service;root;root;System;
-resize2fs@.service;root;root;System;
-resourced.service;root;root;System;
-rndis.service;network_fw;network_fw;System;
-sdbd.service;sdk;sdk;System;
-sdbd_tcp.service;sdk;sdk;System;
-security-config.service;root;root;System::Privileged;
-security-manager-cleanup.service;root;root;System::Privileged;
-security-manager-rules-loader.service;root;root;System::Privileged;
-security-manager.service;root;root;System::Privileged;
-sensord.service;sensor;input;System;
-serial-getty@.service;root;root;User::Shell;
-shutdown-animation.service;application;application;System;
-sound-server.service;multimedia_fw;multimedia_fw;System;
-stability-monitor.service;stability_monitor;stability_monitor;System;
-stc-iptables.service;network_fw;network_fw;System;
-stc-manager.service;root;root;System;
-storaged.service;root;root;System::Privileged;
-swap_manager.service;system_fw;system_fw;System;
-sys-kernel-tracing.service;system_fw;system_fw;System;
-system-default-target-done.service;system_fw;system_fw;System;
-system-delayed-target-done.service;system_fw;system_fw;System;
-system-delayed-target-trigger.service;root;root;System;
-system-popup.service;system_fw;system_fw;System;
-systemd-ask-password-console.service;root;root;System;
-systemd-ask-password-wall.service;root;root;System;
-systemd-binfmt.service;root;root;System;
-systemd-exit.service;root;root;System;
-systemd-fsck-root.service;root;root;System;
-systemd-fsck@.service;root;root;System;
-systemd-halt.service;root;root;System;
-systemd-hibernate-resume@.service;root;root;System;
-systemd-hibernate.service;root;root;System;
-systemd-hostnamed.service;root;root;System;
-systemd-hwdb-update.service;root;root;System;
-systemd-hybrid-sleep.service;root;root;System;
-systemd-initctl.service;root;root;System;
-systemd-journal-catalog-update.service;root;root;System;
-systemd-journal-flush.service;root;root;System;
-systemd-journald.service;root;root;System;
-systemd-kexec.service;root;root;System;
-systemd-localed.service;root;root;System;
-systemd-logind.service;root;root;System::Privileged;
-systemd-machine-id-commit.service;root;root;System;
-systemd-modules-load.service;root;root;System;
-systemd-nspawn@.service;root;root;System;
-systemd-poweroff.service;root;root;System;
-systemd-quotacheck.service;root;root;System;
-systemd-reboot.service;root;root;System;
-systemd-remount-fs.service;root;root;System;
-systemd-suspend.service;root;root;System;
-systemd-sysctl.service;root;root;System;
-systemd-tmpfiles-setup-dev.service;root;root;System::Privileged;
-systemd-tmpfiles-setup.service;root;root;System::Privileged;
-systemd-udev-settle.service;root;root;System;
-systemd-udev-trigger.service;root;root;System;
-systemd-udevd.service;root;root;System::Privileged;
-systemd-update-done.service;root;root;System;
-systemd-update-utmp-runlevel.service;root;root;System;
-systemd-update-utmp.service;root;root;System;
-systemd-user-sessions.service;root;root;System;
-systemd-vconsole-setup.service;root;root;System;
-tef-simulator.service;security_fw;security_fw;System::TEF;
-telephony-daemon.service;telephony;telephony;System;
-tizen-fstrim-user.service;root;root;System;
-tizen-system-env.service;root;root;System;
-tizenid.service;system_fw;system_fw;System;
-tlm.service;root;root;User;
-ttrace-marker.service;system_fw;system_fw;System;
-ua-manager.service;network_fw;network_fw;System;
-udev-sdb-init.service;root;root;System;
-usb-host-ffs-test-daemon.service;system_fw;system_fw;System;
-user@.service;%i;users;User;
-__user@.service;%i;;User;
-vmodem-x86.service;root;root;System::Privileged;
-wait-mount@.service;system_fw;system_fw;System;
-webappenc-initializer.service;security_fw;security_fw;System;
-wmeshd.service;network_fw;network_fw;System
-zigbee-daemon.service;network_fw;network_fw;System
+;ac.service;app_fw;app_fw;System;
+;accounts-service.service;service_fw;service_fw;System;
+;actd.service;root;root;System;
+;alarm-server.service;app_fw;app_fw;System;
+;asp-manager.service;network_fw;network_fw;System;
+;audit-trail.service;security_fw;security_fw;System;
+;auth-fw.service;security_fw;security_fw;System;
+;batterymonitor.service;service_fw;service_fw;System;
+;bluetooth-address.service;network_fw;network_fw;System;
+;bluetooth-force-hci-logger.service;network_fw;network_fw;System;
+;bluetooth-frwk.service;network_fw;network_fw;System;
+;bluetooth-frwk-core.service;network_fw;network_fw;System;
+;bluetooth-hci-down.service;network_fw;network_fw;System;
+;bluetooth-hci-dump@.service;network_fw;network_fw;System;
+;bluetooth-hci-logger.service;network_fw;network_fw;System;
+;bluetooth-hci-logger-stop.service;network_fw;network_fw;System;
+;bluetooth-hci-up.service;network_fw;network_fw;System;
+;bluetooth-share-start.service;network_fw;network_fw;System;
+;bluetooth-stack-down.service;root;root;System;
+;bluetooth-stack-up.service;network_fw;network_fw;System;
+;bluez-start.service;network_fw;network_fw;System;
+;booting-done.service;system_fw;system_fw;System;
+;boot-animation.service;application;application;System;
+;buxton2.service;buxton;buxton;System;
+;callmgr.service;telephony;telephony;System;
+;capi-ui-sticker.service;ui_fw;ui_fw;System;
+;capmgr.service;app_fw;app_fw;System;
+;central-key-manager.service;key-manager;security_fw;System;
+;cert-server.service;security_fw;security_fw;System;
+;chromium-efl.service;root;root;System::Privileged;
+;chromium-efl-install.service;web_fw;web_fw;System;
+;chromium-efl-update.service;root;root;System::Privileged;
+;connman.service;network_fw;network_fw;System;
+;console-getty.service;root;root;System;
+;console-shell.service;root;root;System;
+;container-getty@.service;root;root;System;
+;contextd.service;service_fw;service_fw;System;
+;crash-service.service;crash_worker;crash_worker;System;
+;csr.service;security_fw;security_fw;System;
+;cynara.service;cynara;cynara;System;
+;data-provider-master.service;app_fw;app_fw;System;
+;dbus.service;dbus;dbus;System;
+;debug-shell.service;root;root;System;
+;device-certificate-manager.service;security_fw;security_fw;System;
+;device-policy-manager.service;security_fw;security_fw;System;
+;device-policy-syspopup.service;security_fw;security_fw;System;
+;deviced.service;root;root;System::Privileged;
+;display-manager.service;root;root;System;
+;display-manager-monitor.service;graphic_fw;graphic_fw;System;
+;dlog_cleanup.service;log;log;System;
+;dlog_logger.service;log;log;System;
+;download-provider.service;web_fw;web_fw;System;
+;dummyasm.service;service_fw;service_fw;System;
+;emergency.service;root;root;System;
+;emuld.service;root;root;System::Privileged;
+;emul-common-preinit.service;service_fw;service_fw;System;
+;emul-setup-audio-volume.service;service_fw;service_fw;System;
+;esd.service;app_fw;app_fw;System;
+;faultd.service;root;root;System;
+;feedbackd.service;system_fw;system_fw;System;
+;fido.service;service_fw;service_fw;System;
+;fido-asm.service;service_fw;service_fw;System;
+;fido-bt-roaming-agent.service;service_fw;service_fw;System;
+;focus-server.service;multimedia_fw;multimedia_fw;System;
+;getty@.service;root;root;User::Shell;
+;gumd.service;root;root;System::Privileged;
+;gumd.service;root;root;System;
+;init-update.service;root;root;System::Privileged;
+;initrd-cleanup.service;root;root;System;
+;initrd-parse-etc.service;root;root;System;
+;initrd-switch-root.service;root;root;System;
+;initrd-udevadm-cleanup-db.service;root;root;System;
+;inm-manager.service;network_fw;network_fw;System;
+;kmod-static-nodes.service;root;root;System;
+;krate.service;root;root;System;
+;lbs-server.service;location;location;System;
+;ldconfig.service;root;root;System;
+;license-manager-agent.service;security_fw;security_fw;System;
+;log_dump.service;root;root;System;
+;log_dump.service;system_fw;system_fw;System; # conditionaly used
+;mdgd.service;network_fw;network_fw;System;
+;media-server.service;multimedia_fw;multimedia_fw;System;
+;mediacontroller.service;multimedia_fw;multimedia_fw;System;
+;mm-resource-managerd.service;multimedia_fw;multimedia_fw;System;
+;mobileap-agent.service;network_fw;network_fw;System;
+;msg-server.service;messaging;messaging;System;
+;mtp-initiator.service;network_fw;network_fw;System;
+;mtp-responder.service;network_fw;network_fw;System;
+;murphyd.service;multimedia_fw;multimedia_fw;System;
+;muse-server.service;multimedia_fw;multimedia_fw;System;
+;net-config.service;network_fw;network_fw;System;
+;nether.service;security_fw;security_fw;System;
+;nfc-manager.service;network_fw;network_fw;System;
+;obex.service;network_fw;network_fw;;
+;ode.service;root;root;System::Privileged;
+;ode-progress-ui@.service;application;application;System;
+;offline-update.service;root;root;System::Privileged;
+;opt-usr-fsck.service;system_fw;disk;System;
+;package-manager.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System;
+;pass.service;system_fw;system_fw;System;
+;phonenumber-utils.service;service_fw;service_fw;System;
+;pkg-db-recovery.service;root;root;System;
+;pkgdir-tool.service;app_fw;app_fw;System;
+;privacy-guard-server.service;security_fw;security_fw;System;
+;pulseaudio.service;root;root;System;
+;pushd.service;service_fw;service_fw;System;
+;quotaon.service;root;root;System;
+;rescue.service;root;root;System;
+;resize2fs@.service;root;root;System;
+;resourced.service;root;root;System;
+;rndis.service;network_fw;network_fw;System;
+;sdbd.service;sdk;sdk;System;
+;sdbd_tcp.service;sdk;sdk;System;
+;security-config.service;root;root;System::Privileged;
+;security-manager-cleanup.service;root;root;System::Privileged;
+;security-manager-rules-loader.service;root;root;System::Privileged;
+;security-manager.service;root;root;System::Privileged;
+;sensord.service;sensor;input;System;
+;serial-getty@.service;root;root;User::Shell;
+;shutdown-animation.service;application;application;System;
+;sound-server.service;multimedia_fw;multimedia_fw;System;
+;stability-monitor.service;stability_monitor;stability_monitor;System;
+;stc-iptables.service;network_fw;network_fw;System;
+;stc-manager.service;root;root;System;
+;storaged.service;root;root;System::Privileged;
+;swap_manager.service;system_fw;system_fw;System;
+;sys-kernel-tracing.service;system_fw;system_fw;System;
+;system-default-target-done.service;system_fw;system_fw;System;
+;system-delayed-target-done.service;system_fw;system_fw;System;
+;system-delayed-target-trigger.service;root;root;System;
+;system-popup.service;system_fw;system_fw;System;
+;systemd-ask-password-console.service;root;root;System;
+;systemd-ask-password-wall.service;root;root;System;
+;systemd-binfmt.service;root;root;System;
+;systemd-exit.service;root;root;System;
+;systemd-fsck-root.service;root;root;System;
+;systemd-fsck@.service;root;root;System;
+;systemd-halt.service;root;root;System;
+;systemd-hibernate-resume@.service;root;root;System;
+;systemd-hibernate.service;root;root;System;
+;systemd-hostnamed.service;root;root;System;
+;systemd-hwdb-update.service;root;root;System;
+;systemd-hybrid-sleep.service;root;root;System;
+;systemd-initctl.service;root;root;System;
+;systemd-journal-catalog-update.service;root;root;System;
+;systemd-journal-flush.service;root;root;System;
+;systemd-journald.service;root;root;System;
+;systemd-kexec.service;root;root;System;
+;systemd-localed.service;root;root;System;
+;systemd-logind.service;root;root;System::Privileged;
+;systemd-machine-id-commit.service;root;root;System;
+;systemd-modules-load.service;root;root;System;
+;systemd-nspawn@.service;root;root;System;
+;systemd-poweroff.service;root;root;System;
+;systemd-quotacheck.service;root;root;System;
+;systemd-reboot.service;root;root;System;
+;systemd-remount-fs.service;root;root;System;
+;systemd-suspend.service;root;root;System;
+;systemd-sysctl.service;root;root;System;
+;systemd-tmpfiles-setup-dev.service;root;root;System::Privileged;
+;systemd-tmpfiles-setup.service;root;root;System::Privileged;
+;systemd-udev-settle.service;root;root;System;
+;systemd-udev-trigger.service;root;root;System;
+;systemd-udevd.service;root;root;System::Privileged;
+;systemd-update-done.service;root;root;System;
+;systemd-update-utmp-runlevel.service;root;root;System;
+;systemd-update-utmp.service;root;root;System;
+;systemd-user-sessions.service;root;root;System;
+;systemd-vconsole-setup.service;root;root;System;
+;tef-simulator.service;security_fw;security_fw;System::TEF;
+;telephony-daemon.service;telephony;telephony;System;
+;tizen-fstrim-user.service;root;root;System;
+;tizen-system-env.service;root;root;System;
+;tizenid.service;system_fw;system_fw;System;
+;tlm.service;root;root;User;
+;ttrace-marker.service;system_fw;system_fw;System;
+;ua-manager.service;network_fw;network_fw;System;
+;udev-sdb-init.service;root;root;System;
+;usb-host-ffs-test-daemon.service;system_fw;system_fw;System;
+;user@.service;%i;users;User;
+;__user@.service;%i;;User;
+;vmodem-x86.service;root;root;System::Privileged;
+;wait-mount@.service;system_fw;system_fw;System;
+;webappenc-initializer.service;security_fw;security_fw;System;
+;wmeshd.service;network_fw;network_fw;System;
+;zigbee-daemon.service;network_fw;network_fw;System;
--- /dev/null
+#!/bin/bash
+PATH=/bin:/usr/bin:/sbin:/usr/sbin
+
+result_dir="/opt/share/security-config/result"
+log_dir="/opt/share/security-config/log"
+cur_dir="/usr/share/security-config/test/new_service_test"
+not_permitted_unit_path="/opt/share/security-config/not_permitted_service/"
+system_unit_dir="/usr/lib/systemd/system/"
+dbus_service_dir="/usr/share/dbus-1/system-services/"
+
+# function to move service file to another directory. This socket cannot be used.
+# $1 : file path, $2 : file name
+function move_systemd_unit
+{
+ # TODO : This is temporary. Checking onlycap may need to be considered later.
+ if [ -e "/etc/smack/onlycap" ]
+ then
+ if [ ! -d $not_permitted_unit_path ]
+ then
+ mkdir $not_permitted_unit_path
+ fi
+ mv "$1" "$not_permitted_unit_path$2"
+ fi
+}
+
+
+# init test (move unit file in not_permitted_list to real dir and remove log and result files)
+# $1 : log path, $2 : result path
+function init_test
+{
+ if [ -e "$1" ]
+ then
+ # Restore not permitted service
+ for line in `cat $1`
+ do
+ unit_name=$(echo $line | rev | cut -f1 -d "/" | rev)
+ if [ -e "$not_permitted_unit_path$unit_name" ]
+ then
+ mv $not_permitted_unit_path$unit_name $line
+ fi
+ done
+ rm $1
+ fi
+ if [ -e "$2" ]
+ then
+ rm $2
+ fi
+}
+
+# check a log file and make a result
+# $1 : log path, $2 : test name, $3 : result path
+function check_result
+{
+ if [ ! -e $1 ]
+ then
+ echo "Success! All $2 are in the list"
+ echo "YES" > $3
+ else
+ echo "Fail! Please check the log and "$not_permitted_unit_path
+ echo "NO" > $3
+ fi
+}
+
+
+# check exception
+# $1 : target name, $2 : exception path
+function check_exception
+{
+ temp=$(/usr/bin/grep $1 <<< /usr/bin/cat $2)
+ if [ -n "$temp" ]
+ then
+ return 1
+ fi
+ return 0
+}
-net.asp.service;network_fw;
-net.connman.service;network_fw;
-net.connman.vpn.service;network_fw;
-net.inm-manager.service;network_fw;
-net.mdgd.service;network_fw;
-net.netconfig.service;network_fw;
-net.uamd.service;network_fw;
-net.wifidirect.service;network_fw;
-org.O1.SecurityAccounts.gUserManagement.service;root;
-org.bluez.ag_agent.service;network_fw;
-org.bluez.map_agent.service;root;
-org.bluez.obex.service;network_fw;
-org.bluez.pb_agent.service;root;
-org.freedesktop.locale1.service;root;
-org.freedesktop.login1.service;root;
-org.freedesktop.systemd1.service;root;
-org.projectx.bt.service;root;
-org.projectx.bt_core.service;root;
-org.tizen.MobileapAgent.service;network_fw;
-org.tizen.PhonenumberUtils.dbus.service;service_fw;
-org.tizen.SmartcardService.service;network_fw;
-org.tizen.account.manager.service;root;
-org.tizen.alarm.manager.service;root;
-org.tizen.app2sd.service;root;
-org.tizen.data-provider-master.service;app_fw;
-org.tizen.dpm.syspopup.service;security_fw;
-org.tizen.dummyasm.service;service_fw;
-org.tizen.factory-reset.service;root;
-org.tizen.fido-asm.service;service_fw;
-org.tizen.fido-bt-roaming.service;service_fw;
-org.tizen.fido.service;root;
-org.tizen.lbs.Providers.LbsServer.service;location;
-org.tizen.orchestration.service;system_fw;
-org.tizen.pkg_recovery.service;root;
-org.tizen.pkgdir_tool.service;root;
-org.tizen.pkgmgr.service;root;
-org.tizen.scmirroring.server.service;multimedia_fw;
-org.tizen.SoundServer.service;root;
-org.tizen.smartreply.service;ui_fw;
-org.tizen.system.crash.service;root;
-org.tizen.system.deviced.service;root;
-org.tizen.system.popup.service;root;
-org.tizen.system.storage.service;root;
-org.tizen.system.vibrator.service;system_fw;
-org.tizen.voice.ttsinterruptserver.service;ui_fw;
-org.tizen.voice.ttsnotiserver.service;ui_fw;
-org.tizen.voice.ttsserver.service;ui_fw;
-org.tizen.voice.ttssrserver.service;ui_fw;
-org.tizen.zigbee.service;network_fw;
--- /dev/null
+;ac.socket;;;0777;;;
+;central-key-manager-api-control.socket;;;0777;*;@;
+;systemd-journald-audit.socket;;;;;;
+;systemd-udevd-control.socket;;;0600;;;
+;systemd-udevd-kernel.socket;;;;;;
+;systemd-initctl.socket;;;0600;;;
+;cynara-monitor-get.socket;;security_fw;0060;@;@;
+;cynara.socket;;;0777;*;@;
+;audit-trail.socket;security_fw;security_fw;0755;*;@;
+;central-key-manager-api-ocsp.socket;;;0777;*;@;
+;usb-host-test.socket;;;;;;
+;download-provider.socket;;;0777;;;
+;browser-provider.socket;;;0777;;;
+;central-key-manager-api-encryption.socket;;;0777;*;@;
+;auth-fw-passwd-policy.socket;security_fw;security_fw;0777;*;@;
+;msg-server.socket;messaging;messaging;;;;
+;cynara-agent.socket;;security_fw;0060;*;@;
+;cert-checker.socket;security_fw;security_fw;0777;;;
+;security-manager.socket;;;0777;*;@;
+;swap_manager.socket;owner;users;;*;@;
+;csr-admin.socket;;;0777;*;@;
+;sensord.socket;sensor;input;0777;*;@;
+;syslog.socket;;;0666;;;
+;connman.socket;;;;*;@;
+;dbus.socket;;;;*;@;
+;trm.socket;system_fw;system_fw;;*;@;
+;auth-fw-passwd-check.socket;security_fw;security_fw;0777;*;@;
+;ode.socket;;;;*;@;
+;device-certificate-manager.socket;;;0777;*;@;
+;sdbd_tcp.socket;;;;*;@;
+;sdbd.socket;;;;;;
+;cynara-admin.socket;;;0700;@;@;
+;auth-fw-passwd-set.socket;security_fw;security_fw;0777;*;@;
+;buxton2.socket;;;0777;*;@;
+;csr-cs.socket;;;0777;*;@;
+;mediacontroller.socket;multimedia_fw;multimedia_fw;;;;
+;auth-fw-passwd-reset.socket;security_fw;security_fw;0777;*;@;
+;privacy-guard-server.socket;security_fw;security_fw;0777;;;
+;systemd-journald-dev-log.socket;;;0666;;;
+;central-key-manager-api-storage.socket;;;0777;*;@;
+;csr-wp.socket;;;0777;*;@;
+;mtp-responder.socket;;;;;;
+;cert-server.socket;security_fw;security_fw;0777;;;
+;device-policy-manager.socket;security_fw;security_fw;0777;*;@;
+;systemd-journald.socket;;;0666;;;
-ac.service;app_fw;app_fw;System;
-accounts-service.service;service_fw;service_fw;System;
-actd.service;root;root;System;
-alarm-server.service;app_fw;app_fw;System;
-app2sd-server.service;root;root;System;
-asp-manager.service;network_fw;network_fw;System;
-audit-trail.service;security_fw;security_fw;System;
-auth-fw.service;security_fw;security_fw;System;
-bluetooth-address.service;network_fw;network_fw;System;
-bluetooth-ag-agent.service;network_fw;network_fw;System;
-bluetooth-force-hci-logger.service;network_fw;network_fw;System;
-bluetooth-frwk.service;network_fw;network_fw;System;
-bluetooth-frwk-core.service;network_fw;network_fw;System;
-bluetooth-hci-device.service;root;root;System;
-bluetooth-hci-down.service;network_fw;network_fw;System;
-bluetooth-hci-dump@.service;network_fw;network_fw;System;
-bluetooth-hci-logger.service;network_fw;network_fw;System;
-bluetooth-hci-logger-stop.service;network_fw;network_fw;System;
-bluetooth-hci-up.service;network_fw;network_fw;System;
-bluetooth-hciattach@.service;root;root;System;
-bluetooth-map-agent.service;network_fw;network_fw;System;
-bluetooth-pbap-agent.service;network_fw;network_fw;System;
-bluetooth-share.service;network_fw;network_fw;System;
-bluetooth-share-start.service;network_fw;network_fw;System;
-bluetooth-stack-down.service;root;root;System;
-bluetooth-stack-down-with-radio.service;network_fw;network_fw;System;
-bluetooth-stack-up.service;network_fw;network_fw;System;
-bluez-start.service;network_fw;network_fw;System;
-booting-done.service;system_fw;system_fw;System;
-boot-animation.service;application;application;System;
-browser-provider.service;web_fw;web_fw;System;
-buxton2.service;buxton;buxton;System;
-callmgr.service;telephony;telephony;System;
-capi-ui-sticker.service;ui_fw;ui_fw;System;
-capmgr.service;app_fw;app_fw;System;
-central-key-manager.service;key-manager;security_fw;System;
-cert-checker.service;security_fw;security_fw;System;
-cert-server.service;security_fw;security_fw;System;
-chromium-efl.service;root;root;System::Privileged;
-chromium-efl-install.service;web_fw;web_fw;System;
-chromium-efl-update.service;root;root;System::Privileged;
-clat.service;network_fw;network_fw;System;
-connman-vpn.service;network_fw;network_fw;System;
-connman.service;network_fw;network_fw;System;
-console-getty.service;root;root;System;
-console-shell.service;root;root;System;
-container-getty@.service;root;root;System;
-contextd.service;service_fw;service_fw;System;
-crash-service.service;crash_worker;crash_worker;System;
-csr.service;security_fw;security_fw;System;
-cynara.service;cynara;cynara;System;
-data-provider-master.service;app_fw;app_fw;System;
-dbus.service;dbus;dbus;System;
-debug-shell.service;root;root;System;
-device-certificate-manager.service;security_fw;security_fw;System;
-device-policy-manager.service;security_fw;security_fw;System;
-device-policy-syspopup.service;security_fw;security_fw;System;
-deviced.service;root;root;System::Privileged;
-display-manager.service;root;root;System;
-display-manager-monitor.service;graphic_fw;graphic_fw;System;
-dlog_cleanup.service;log;log;System;
-dlog_logger.service;log;log;System;
-download-provider.service;web_fw;web_fw;System;
-dummyasm.service;service_fw;service_fw;System;
-edge-orchestration.service;system_fw;system_fw;System;
-emergency.service;root;root;System;
-esd.service;app_fw;app_fw;System;
-factory-reset.service;root;root;System::Privileged;
-factory-reset-launch.service;root;root;System::Privileged;
-faultd.service;root;root;System;
-feedbackd.service;system_fw;system_fw;System;
-fido.service;service_fw;service_fw;System;
-fido-asm.service;service_fw;service_fw;System;
-fido-bt-roaming-agent.service;service_fw;service_fw;System;
-focus-server.service;multimedia_fw;multimedia_fw;System; # need to check by SFV
-getty@.service;root;root;User::Shell;
-gumd.service;root;root;System::Privileged;
-gumd.service;root;root;System;
-init-update.service;root;root;System::Privileged;
-initrd-cleanup.service;root;root;System;
-initrd-parse-etc.service;root;root;System;
-initrd-switch-root.service;root;root;System;
-initrd-udevadm-cleanup-db.service;root;root;System;
-inm-manager.service;network_fw;network_fw;System;
-kmod-static-nodes.service;root;root;System;
-krate.service;root;root;System;
-lbs-server.service;location;location;System;
-ldconfig.service;root;root;System;
-license-manager-agent.service;security_fw;security_fw;System;
-log_dump.service;root;root;System;
-log_dump.service;system_fw;system_fw;System; # conditionaly used
-mdgd.service;network_fw;network_fw;System;
-media-server.service;multimedia_fw;multimedia_fw;System;
-mediacontroller.service;multimedia_fw;multimedia_fw;System;
-mm-resource-managerd.service;multimedia_fw;multimedia_fw;System;
-mobileap-agent.service;network_fw;network_fw;System;
-modemd.service;telephony;telephony;System;
-msg-server.service;messaging;messaging;System;
-mtp-initiator.service;network_fw;network_fw;System;
-mtp-responder.service;network_fw;network_fw;System;
-murphyd.service;multimedia_fw;multimedia_fw;System;
-muse-server.service;multimedia_fw;multimedia_fw;System;
-net-config.service;network_fw;network_fw;System;
-nether.service;security_fw;security_fw;System;
-nvitemd.service;telephony;telephony;System;
-obex.service;network_fw;network_fw;System;
-ode.service;root;root;System::Privileged;
-ode-progress-ui@.service;application;application;System;
-offline-update.service;root;root;System::Privileged;
-opt-usr-fsck.service;system_fw;disk;System;
-package-manager.service;app_fw;app_fw;System;
-package-recovery.service;app_fw;app_fw;System;
-pass.service;system_fw;system_fw;System;
-phonenumber-utils.service;service_fw;service_fw;System;
-pkg-db-recovery.service;root;root;System;
-pkgdir-tool.service;app_fw;app_fw;System;
-privacy-guard-server.service;security_fw;security_fw;System;
-pulseaudio.service;root;root;System;
-pushd.service;service_fw;service_fw;System;
-quotaon.service;root;root;System;
-radio-bt-off.service;network_fw;network_fw;System;
-radio-bt-on.service;network_fw;network_fw;System;
-radio-bt-on-stop.service;root;root;System;
-rescue.service;root;root;System;
-resize2fs@.service;root;root;System;
-resourced.service;root;root;System;
-rndis.service;network_fw;network_fw;System;
-sdbd.service;sdk;sdk;System;
-sdbd_tcp.service;sdk;sdk;System;
-security-config.service;root;root;System::Privileged;
-security-manager-cleanup.service;root;root;System::Privileged;
-security-manager-rules-loader.service;root;root;System::Privileged;
-security-manager.service;root;root;System::Privileged;
-sensord.service;sensor;input;System;
-serial-getty@.service;root;root;User::Shell;
-shutdown-animation.service;application;application;System;
-smartcard-service.service;network_fw;network_fw;System;
-sound-server.service;multimedia_fw;multimedia_fw;System;
-stability-monitor.service;stability_monitor;stability_monitor;System;
-stc-iptables.service;network_fw;network_fw;System;
-stc-manager.service;root;root;System;
-storaged.service;root;root;System::Privileged;
-swap_manager.service;system_fw;system_fw;System;
-sys-kernel-tracing.service;system_fw;system_fw;System;
-system-default-target-done.service;system_fw;system_fw;System;
-system-delayed-target-done.service;system_fw;system_fw;System;
-system-delayed-target-trigger.service;root;root;System;
-system-popup.service;system_fw;system_fw;System;
-systemd-ask-password-console.service;root;root;System;
-systemd-ask-password-wall.service;root;root;System;
-systemd-binfmt.service;root;root;System;
-systemd-exit.service;root;root;System;
-systemd-fsck-root.service;root;root;System;
-systemd-fsck@.service;root;root;System;
-systemd-halt.service;root;root;System;
-systemd-hibernate-resume@.service;root;root;System;
-systemd-hibernate.service;root;root;System;
-systemd-hostnamed.service;root;root;System; # need to be checked whether it is existed
-systemd-hwdb-update.service;root;root;System;
-systemd-hybrid-sleep.service;root;root;System;
-systemd-initctl.service;root;root;System;
-systemd-journal-catalog-update.service;root;root;System;
-systemd-journal-flush.service;root;root;System;
-systemd-journald.service;root;root;System;
-systemd-kexec.service;root;root;System;
-systemd-localed.service;root;root;System;
-systemd-logind.service;root;root;System::Privileged;
-systemd-machine-id-commit.service;root;root;System;
-systemd-modules-load.service;root;root;System;
-systemd-nspawn@.service;root;root;System;
-systemd-poweroff.service;root;root;System;
-systemd-quotacheck.service;root;root;System;
-systemd-reboot.service;root;root;System;
-systemd-remount-fs.service;root;root;System;
-systemd-suspend.service;root;root;System;
-systemd-sysctl.service;root;root;System;
-systemd-tmpfiles-setup-dev.service;root;root;System::Privileged;
-systemd-tmpfiles-setup.service;root;root;System::Privileged;
-systemd-udev-settle.service;root;root;System;
-systemd-udev-trigger.service;root;root;System;
-systemd-udevd.service;root;root;System::Privileged;
-systemd-update-done.service;root;root;System;
-systemd-update-utmp-runlevel.service;root;root;System;
-systemd-update-utmp.service;root;root;System;
-systemd-user-sessions.service;root;root;System;
-systemd-vconsole-setup.service;root;root;System;
-telephony-daemon.service;telephony;telephony;System;
-tizen-fstrim-user.service;root;root;System;
-tizen-system-env.service;root;root;System;
-tizenid.service;system_fw;system_fw;System;
-tlm.service;root;root;User;
-trm.service;system_fw;system_fw;System;
-ttrace-marker.service;system_fw;system_fw;System;
-ua-manager.service;network_fw;network_fw;System;
-udev-sdb-init.service;root;root;System;
-usb-host-ffs-test-daemon.service;system_fw;system_fw;System;
-user@.service;%i;users;User; # Need to be defined group
-__user@.service;%i;;User; # Need to be defined group
-wait-mount@.service;system_fw;system_fw;System;
-webappenc-initializer.service;security_fw;security_fw;System;
-wifi-direct-manager.service;network_fw;network_fw;System;
-wifi-ready.service;network_fw;network_fw;System;
-wmeshd.service;network_fw;network_fw;System # need to be checked whether it is existed
-zigbee-daemon.service;network_fw;network_fw;System # need to be checked whether it is existed
+;ac.service;app_fw;app_fw;System;
+;accounts-service.service;service_fw;service_fw;System;
+;actd.service;root;root;System;
+;alarm-server.service;app_fw;app_fw;System;
+;app2sd-server.service;root;root;System;
+;asp-manager.service;network_fw;network_fw;System;
+;audit-trail.service;security_fw;security_fw;System;
+;auth-fw.service;security_fw;security_fw;System;
+;bluetooth-address.service;network_fw;network_fw;System;
+;bluetooth-ag-agent.service;network_fw;network_fw;System;
+;bluetooth-force-hci-logger.service;network_fw;network_fw;System;
+;bluetooth-frwk.service;network_fw;network_fw;System;
+;bluetooth-frwk-core.service;network_fw;network_fw;System;
+;bluetooth-hci-device.service;root;root;System;
+;bluetooth-hci-down.service;network_fw;network_fw;System;
+;bluetooth-hci-dump@.service;network_fw;network_fw;System;
+;bluetooth-hci-logger.service;network_fw;network_fw;System;
+;bluetooth-hci-logger-stop.service;network_fw;network_fw;System;
+;bluetooth-hci-up.service;network_fw;network_fw;System;
+;bluetooth-hciattach@.service;root;root;System;
+;bluetooth-map-agent.service;network_fw;network_fw;System;
+;bluetooth-pbap-agent.service;network_fw;network_fw;System;
+;bluetooth-share.service;network_fw;network_fw;System;
+;bluetooth-share-start.service;network_fw;network_fw;System;
+;bluetooth-stack-down.service;root;root;System;
+;bluetooth-stack-down-with-radio.service;network_fw;network_fw;System;
+;bluetooth-stack-up.service;network_fw;network_fw;System;
+;bluez-start.service;network_fw;network_fw;System;
+;booting-done.service;system_fw;system_fw;System;
+;boot-animation.service;application;application;System;
+;browser-provider.service;web_fw;web_fw;System;
+;buxton2.service;buxton;buxton;System;
+;callmgr.service;telephony;telephony;System;
+;capi-ui-sticker.service;ui_fw;ui_fw;System;
+;capmgr.service;app_fw;app_fw;System;
+;central-key-manager.service;key-manager;security_fw;System;
+;cert-checker.service;security_fw;security_fw;System;
+;cert-server.service;security_fw;security_fw;System;
+;chromium-efl.service;root;root;System::Privileged;
+;chromium-efl-install.service;web_fw;web_fw;System;
+;chromium-efl-update.service;root;root;System::Privileged;
+;clat.service;network_fw;network_fw;System;
+;connman-vpn.service;network_fw;network_fw;System;
+;connman.service;network_fw;network_fw;System;
+;console-getty.service;root;root;System;
+;console-shell.service;root;root;System;
+;container-getty@.service;root;root;System;
+;contextd.service;service_fw;service_fw;System;
+;crash-service.service;crash_worker;crash_worker;System;
+;csr.service;security_fw;security_fw;System;
+;cynara.service;cynara;cynara;System;
+;data-provider-master.service;app_fw;app_fw;System;
+;dbus.service;dbus;dbus;System;
+;debug-shell.service;root;root;System;
+;device-certificate-manager.service;security_fw;security_fw;System;
+;device-policy-manager.service;security_fw;security_fw;System;
+;device-policy-syspopup.service;security_fw;security_fw;System;
+;deviced.service;root;root;System::Privileged;
+;display-manager.service;root;root;System;
+;display-manager-monitor.service;graphic_fw;graphic_fw;System;
+;dlog_cleanup.service;log;log;System;
+;dlog_logger.service;log;log;System;
+;download-provider.service;web_fw;web_fw;System;
+;dummyasm.service;service_fw;service_fw;System;
+;edge-orchestration.service;system_fw;system_fw;System;
+;emergency.service;root;root;System;
+;esd.service;app_fw;app_fw;System;
+;factory-reset.service;root;root;System::Privileged;
+;factory-reset-launch.service;root;root;System::Privileged;
+;faultd.service;root;root;System;
+;feedbackd.service;system_fw;system_fw;System;
+;fido.service;service_fw;service_fw;System;
+;fido-asm.service;service_fw;service_fw;System;
+;fido-bt-roaming-agent.service;service_fw;service_fw;System;
+;focus-server.service;multimedia_fw;multimedia_fw;System; # need to check by SFV
+;getty@.service;root;root;User::Shell;
+;gumd.service;root;root;System::Privileged;
+;gumd.service;root;root;System;
+;init-update.service;root;root;System::Privileged;
+;initrd-cleanup.service;root;root;System;
+;initrd-parse-etc.service;root;root;System;
+;initrd-switch-root.service;root;root;System;
+;initrd-udevadm-cleanup-db.service;root;root;System;
+;inm-manager.service;network_fw;network_fw;System;
+;kmod-static-nodes.service;root;root;System;
+;krate.service;root;root;System;
+;lbs-server.service;location;location;System;
+;ldconfig.service;root;root;System;
+;license-manager-agent.service;security_fw;security_fw;System;
+;log_dump.service;root;root;System;
+;log_dump.service;system_fw;system_fw;System; # conditionaly used
+;mdgd.service;network_fw;network_fw;System;
+;media-server.service;multimedia_fw;multimedia_fw;System;
+;mediacontroller.service;multimedia_fw;multimedia_fw;System;
+;mm-resource-managerd.service;multimedia_fw;multimedia_fw;System;
+;mobileap-agent.service;network_fw;network_fw;System;
+;modemd.service;telephony;telephony;System;
+;msg-server.service;messaging;messaging;System;
+;mtp-initiator.service;network_fw;network_fw;System;
+;mtp-responder.service;network_fw;network_fw;System;
+;murphyd.service;multimedia_fw;multimedia_fw;System;
+;muse-server.service;multimedia_fw;multimedia_fw;System;
+;net-config.service;network_fw;network_fw;System;
+;nether.service;security_fw;security_fw;System;
+;nvitemd.service;telephony;telephony;System;
+;obex.service;network_fw;network_fw;System;
+;ode.service;root;root;System::Privileged;
+;ode-progress-ui@.service;application;application;System;
+;offline-update.service;root;root;System::Privileged;
+;opt-usr-fsck.service;system_fw;disk;System;
+;package-manager.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System;
+;pass.service;system_fw;system_fw;System;
+;phonenumber-utils.service;service_fw;service_fw;System;
+;pkg-db-recovery.service;root;root;System;
+;pkgdir-tool.service;app_fw;app_fw;System;
+;privacy-guard-server.service;security_fw;security_fw;System;
+;pulseaudio.service;root;root;System;
+;pushd.service;service_fw;service_fw;System;
+;quotaon.service;root;root;System;
+;radio-bt-off.service;network_fw;network_fw;System;
+;radio-bt-on.service;network_fw;network_fw;System;
+;radio-bt-on-stop.service;root;root;System;
+;rescue.service;root;root;System;
+;resize2fs@.service;root;root;System;
+;resourced.service;root;root;System;
+;rndis.service;network_fw;network_fw;System;
+;sdbd.service;sdk;sdk;System;
+;sdbd_tcp.service;sdk;sdk;System;
+;security-config.service;root;root;System::Privileged;
+;security-manager-cleanup.service;root;root;System::Privileged;
+;security-manager-rules-loader.service;root;root;System::Privileged;
+;security-manager.service;root;root;System::Privileged;
+;sensord.service;sensor;input;System;
+;serial-getty@.service;root;root;User::Shell;
+;shutdown-animation.service;application;application;System;
+;smartcard-service.service;network_fw;network_fw;System;
+;sound-server.service;multimedia_fw;multimedia_fw;System;
+;stability-monitor.service;stability_monitor;stability_monitor;System;
+;stc-iptables.service;network_fw;network_fw;System;
+;stc-manager.service;root;root;System;
+;storaged.service;root;root;System::Privileged;
+;swap_manager.service;system_fw;system_fw;System;
+;sys-kernel-tracing.service;system_fw;system_fw;System;
+;system-default-target-done.service;system_fw;system_fw;System;
+;system-delayed-target-done.service;system_fw;system_fw;System;
+;system-delayed-target-trigger.service;root;root;System;
+;system-popup.service;system_fw;system_fw;System;
+;systemd-ask-password-console.service;root;root;System;
+;systemd-ask-password-wall.service;root;root;System;
+;systemd-binfmt.service;root;root;System;
+;systemd-exit.service;root;root;System;
+;systemd-fsck-root.service;root;root;System;
+;systemd-fsck@.service;root;root;System;
+;systemd-halt.service;root;root;System;
+;systemd-hibernate-resume@.service;root;root;System;
+;systemd-hibernate.service;root;root;System;
+;systemd-hostnamed.service;root;root;System; # need to be checked whether it is existed
+;systemd-hwdb-update.service;root;root;System;
+;systemd-hybrid-sleep.service;root;root;System;
+;systemd-initctl.service;root;root;System;
+;systemd-journal-catalog-update.service;root;root;System;
+;systemd-journal-flush.service;root;root;System;
+;systemd-journald.service;root;root;System;
+;systemd-kexec.service;root;root;System;
+;systemd-localed.service;root;root;System;
+;systemd-logind.service;root;root;System::Privileged;
+;systemd-machine-id-commit.service;root;root;System;
+;systemd-modules-load.service;root;root;System;
+;systemd-nspawn@.service;root;root;System;
+;systemd-poweroff.service;root;root;System;
+;systemd-quotacheck.service;root;root;System;
+;systemd-reboot.service;root;root;System;
+;systemd-remount-fs.service;root;root;System;
+;systemd-suspend.service;root;root;System;
+;systemd-sysctl.service;root;root;System;
+;systemd-tmpfiles-setup-dev.service;root;root;System::Privileged;
+;systemd-tmpfiles-setup.service;root;root;System::Privileged;
+;systemd-udev-settle.service;root;root;System;
+;systemd-udev-trigger.service;root;root;System;
+;systemd-udevd.service;root;root;System::Privileged;
+;systemd-update-done.service;root;root;System;
+;systemd-update-utmp-runlevel.service;root;root;System;
+;systemd-update-utmp.service;root;root;System;
+;systemd-user-sessions.service;root;root;System;
+;systemd-vconsole-setup.service;root;root;System;
+;telephony-daemon.service;telephony;telephony;System;
+;tizen-fstrim-user.service;root;root;System;
+;tizen-system-env.service;root;root;System;
+;tizenid.service;system_fw;system_fw;System;
+;tlm.service;root;root;User;
+;trm.service;system_fw;system_fw;System;
+;ttrace-marker.service;system_fw;system_fw;System;
+;ua-manager.service;network_fw;network_fw;System;
+;udev-sdb-init.service;root;root;System;
+;usb-host-ffs-test-daemon.service;system_fw;system_fw;System;
+;user@.service;%i;users;User; # Need to be defined group
+;__user@.service;%i;;User; # Need to be defined group
+;wait-mount@.service;system_fw;system_fw;System;
+;webappenc-initializer.service;security_fw;security_fw;System;
+;wifi-direct-manager.service;network_fw;network_fw;System;
+;wifi-ready.service;network_fw;network_fw;System;
+;wmeshd.service;network_fw;network_fw;System; # need to be checked whether it is existed
+;zigbee-daemon.service;network_fw;network_fw;System; # need to be checked whether it is existed
-net.asp.service;network_fw;
-net.connman.service;network_fw;
-net.connman.vpn.service;network_fw;
-net.inm-manager.service;network_fw;
-net.mdgd.service;network_fw;
-net.netconfig.service;network_fw;
-net.uamd.service;network_fw;
-net.wifidirect.service;network_fw;
-net.wmesh.service;network_fw;
-org.O1.SecurityAccounts.gUserManagement.service;root;
-org.bluez.obex.service;network_fw;
-org.freedesktop.hostname1.service;root;
-org.freedesktop.locale1.service;root;
-org.freedesktop.login1.service;root;
-org.freedesktop.systemd1.service;root;
-org.projectx.bt.service;root;
-org.projectx.bt_core.service;root;
-org.tizen.MobileapAgent.service;network_fw;
-org.tizen.PhonenumberUtils.dbus.service;service_fw;
-org.tizen.SoundServer.service;root;
-org.tizen.alarm.manager.service;root;
-org.tizen.data-provider-master.service;app_fw;
-org.tizen.dpm.syspopup.service;security_fw;
-org.tizen.dummyasm.service;service_fw;
-org.tizen.fido-asm.service;service_fw;
-org.tizen.fido-bt-roaming.service;service_fw;
-org.tizen.fido.service;root;
-org.tizen.orchestration.service;system_fw;
-org.tizen.pkg_recovery.service;root;
-org.tizen.pkgdir_tool.service;root;
-org.tizen.pkgmgr.service;root;
-org.tizen.scmirroring.server.service;multimedia_fw;
-org.tizen.smartreply.service;ui_fw;
-org.tizen.system.crash.service;root;
-org.tizen.system.deviced.service;root;
-org.tizen.system.popup.service;root;
-org.tizen.system.storage.service;root;
-org.tizen.voice.ttsinterruptserver.service;ui_fw;
-org.tizen.voice.ttsnotiserver.service;ui_fw;
-org.tizen.voice.ttsserver.service;ui_fw;
-org.tizen.voice.ttssrserver.service;ui_fw;
-org.tizen.zigbee.service;network_fw;
-org.bluez.service;root;
--- /dev/null
+;ode.socket;;;;*;@;
+;download-provider.socket;;;0777;;;
+;security-manager.socket;;;0777;*;@;
+;cynara.socket;;;0777;*;@;
+;device-policy-manager.socket;security_fw;security_fw;0777;*;@;
+;central-key-manager-api-control.socket;;;0777;*;@;
+;buxton2.socket;;;0777;*;@;
+;syslog.socket;;;0666;;;
+;usb-host-test.socket;;;;;;
+;ac.socket;;;0777;;;
+;auth-fw-passwd-reset.socket;security_fw;security_fw;0777;*;@;
+;systemd-udevd-kernel.socket;;;;;;
+;device-certificate-manager.socket;;;0777;*;@;
+;cert-server.socket;security_fw;security_fw;0777;;;
+;download-provider.socket;;;0777;;;
+;security-manager.socket;;;0777;*;@;
+;cynara.socket;;;0777;*;@;
+;device-policy-manager.socket;security_fw;security_fw;0777;*;@;
+;central-key-manager-api-control.socket;;;0777;*;@;
+;buxton2.socket;;;0777;*;@;
+;ac.socket;;;0777;;;
+;auth-fw-passwd-reset.socket;security_fw;security_fw;0777;*;@;
+;systemd-udevd-kernel.socket;;;;;;
+;device-certificate-manager.socket;;;0777;*;@;
+;cert-server.socket;security_fw;security_fw;0777;;;
+;auth-fw-passwd-set.socket;security_fw;security_fw;0777;*;@;
+;systemd-udevd-control.socket;;;0600;;;
+;auth-fw-passwd-policy.socket;security_fw;security_fw;0777;*;@;
+;connman.socket;;;;*;@;
+;browser-provider.socket;;;0777;;;
+;central-key-manager-api-ocsp.socket;;;0777;*;@;
+;cynara-monitor-get.socket;;security_fw;0060;@;@;
+;systemd-initctl.socket;;;0600;;;
+;dbus.socket;;;;*;@;
+;systemd-journald-dev-log.socket;;;0666;;;
+;central-key-manager-api-encryption.socket;;;0777;*;@;
+;mediacontroller.socket;multimedia_fw;multimedia_fw;;;;
+;cynara-admin.socket;;;0700;@;@;
+;systemd-journald.socket;;;0666;;;
+;sdbd_tcp.socket;;;;*;@;
+;central-key-manager-api-storage.socket;;;0777;*;@;
+;auth-fw-passwd-check.socket;security_fw;security_fw;0777;*;@;
+;systemd-journald-audit.socket;;;;;;
+;cynara-agent.socket;;security_fw;0060;*;@;
+;auth-fw-passwd-set.socket;security_fw;security_fw;0777;*;@;
+;systemd-udevd-control.socket;;;0600;;;
+;dbus.socket;;;;*;@;
+;auth-fw-passwd-policy.socket;security_fw;security_fw;0777;*;@;
+;connman.socket;;;;*;@;
+;browser-provider.socket;;;0777;;;
+;sdbd.socket;;;;;;
+;central-key-manager-api-ocsp.socket;;;0777;*;@;
+;cynara-monitor-get.socket;;security_fw;0060;@;@;
+;systemd-initctl.socket;;;0600;;;
+;dbus.socket;;;;*;@;
+;systemd-journald-dev-log.socket;;;0666;;;
+;central-key-manager-api-encryption.socket;;;0777;*;@;
+;cynara.socket;;;0777;*;@;
+;mediacontroller.socket;multimedia_fw;multimedia_fw;;;;
+;cynara-admin.socket;;;0700;@;@;
+;systemd-journald.socket;;;0666;;;
+;audit-trail.socket;security_fw;security_fw;0755;*;@;
+;sdbd_tcp.socket;;;;*;@;
+;central-key-manager-api-storage.socket;;;0777;*;@;
+;auth-fw-passwd-check.socket;security_fw;security_fw;0777;*;@;
+;systemd-journald-audit.socket;;;;;;
+;cynara-agent.socket;;security_fw;0060;*;@;
-ac.service;app_fw;app_fw;System;
-actd.service;root;root;System;
-alarm-server.service;app_fw;app_fw;System;
-asp-manager.service;network_fw;network_fw;System;
-audit-trail.service;security_fw;security_fw;System;
-auth-fw.service;security_fw;security_fw;System;
-bluetooth-ag-agent.service;network_fw;network_fw;System;
-bluetooth.service;network_fw;network_fw;System;
-bluetooth-address.service;network_fw;network_fw;System;
-bluetooth-force-hci-logger.service;network_fw;network_fw;System;
-bluetooth-frwk.service;network_fw;network_fw;System;
-bluetooth-frwk-core.service;network_fw;network_fw;System;
-bluetooth-hci-down.service;network_fw;network_fw;System;
-bluetooth-hci-dump@.service;network_fw;network_fw;System;
-bluetooth-hci-logger.service;network_fw;network_fw;System;
-bluetooth-hci-logger-stop.service;network_fw;network_fw;System;
-bluetooth-hci-up.service;network_fw;network_fw;System;
-bluetooth-share-start.service;network_fw;network_fw;System;
-bluetooth-stack-down.service;root;root;System;
-bluetooth-stack-up.service;network_fw;network_fw;System;
-bluez-start.service;network_fw;network_fw;System;
-booting-done.service;system_fw;system_fw;System;
-browser-provider.service;web_fw;web_fw;System;
-buxton2.service;buxton;buxton;System;
-capi-ui-sticker.service;ui_fw;ui_fw;System;
-capmgr.service;app_fw;app_fw;System;
-central-key-manager.service;key-manager;security_fw;System;
-cert-server.service;security_fw;security_fw;System;
-chromium-efl.service;root;root;System::Privileged;
-chromium-efl-install.service;web_fw;web_fw;System;
-chromium-efl-update.service;root;root;System::Privileged;
-clat.service;network_fw;network_fw;System;
-connman-vpn.service;network_fw;network_fw;System;
-connman.service;network_fw;network_fw;System;
-console-getty.service;root;root;System;
-console-shell.service;root;root;System;
-container-getty@.service;root;root;System;
-crash-service.service;crash_worker;crash_worker;System;
-csr.service;security_fw;security_fw;System;
-cynara.service;cynara;cynara;System;
-data-provider-master.service;app_fw;app_fw;System;
-dbus.service;dbus;dbus;System;
-debug-shell.service;root;root;System;
-device-certificate-manager.service;security_fw;security_fw;System;
-device-policy-manager.service;security_fw;security_fw;System;
-device-policy-syspopup.service;security_fw;security_fw;System;
-deviced.service;root;root;System::Privileged;
-display-manager.service;root;root;System;
-display-manager-monitor.service;graphic_fw;graphic_fw;System;
-dlog_cleanup.service;log;log;System;
-dlog_logger.service;log;log;System;
-download-provider.service;web_fw;web_fw;System;
-dummyasm.service;service_fw;service_fw;System;
-edge-orchestration.service;system_fw;system_fw;System;
-emergency.service;root;root;System;
-esd.service;app_fw;app_fw;System;
-feedbackd.service;system_fw;system_fw;System;
-fido.service;service_fw;service_fw;System;
-fido-asm.service;service_fw;service_fw;System;
-fido-bt-roaming-agent.service;service_fw;service_fw;System;
-focus-server.service;multimedia_fw;multimedia_fw;System;
-getty@.service;root;root;User::Shell;
-gumd.service;root;root;System::Privileged;
-gumd.service;root;root;System;
-init-update.service;root;root;System::Privileged;
-initrd-cleanup.service;root;root;System;
-initrd-parse-etc.service;root;root;System;
-initrd-switch-root.service;root;root;System;
-initrd-udevadm-cleanup-db.service;root;root;System;
-inm-manager.service;network_fw;network_fw;System;
-kmod-static-nodes.service;root;root;System;
-ldconfig.service;root;root;System;
-license-manager-agent.service;security_fw;security_fw;System;
-log_dump.service;root;root;System;
-log_dump.service;system_fw;system_fw;System; # conditionaly used
-mdgd.service;network_fw;network_fw;System;
-media-server.service;multimedia_fw;multimedia_fw;System;
-mediacontroller.service;multimedia_fw;multimedia_fw;System;
-mobileap-agent.service;network_fw;network_fw;System;
-mtp-initiator.service;network_fw;network_fw;System;
-mm-resource-managerd.service;multimedia_fw;multimedia_fw;System;
-murphyd.service;multimedia_fw;multimedia_fw;System;
-muse-server.service;multimedia_fw;multimedia_fw;System;
-net-config.service;network_fw;network_fw;System;
-nether.service;security_fw;security_fw;System;
-ode.service;root;root;System::Privileged;
-ode-progress-ui@.service;application;application;System;
-offline-update.service;root;root;System::Privileged;
-opt-usr-fsck.service;system_fw;disk;System;
-package-manager.service;app_fw;app_fw;System;
-package-recovery.service;app_fw;app_fw;System;
-pass.service;system_fw;system_fw;System;
-phonenumber-utils.service;service_fw;service_fw;System;
-pkg-db-recovery.service;root;root;System;
-pkgdir-tool.service;app_fw;app_fw;System;
-privacy-guard-server.service;security_fw;security_fw;System;
-pulseaudio.service;root;root;System;
-pushd.service;service_fw;service_fw;System;
-quotaon.service;root;root;System;
-rescue.service;root;root;System;
-resize2fs@.service;root;root;System;
-resourced.service;root;root;System;
-rndis.service;network_fw;network_fw;System;
-sdbd.service;sdk;sdk;System;
-sdbd_tcp.service;sdk;sdk;System;
-security-manager-cleanup.service;root;root;System::Privileged;
-security-manager-rules-loader.service;root;root;System::Privileged;
-security-manager.service;root;root;System::Privileged;
-serial-getty@.service;root;root;User::Shell;
-sound-server.service;multimedia_fw;multimedia_fw;System;
-stability-monitor.service;stability_monitor;stability_monitor;System;
-stc-iptables.service;network_fw;network_fw;System;
-stc-manager.service;root;root;System;
-storaged.service;root;root;System::Privileged;
-sys-kernel-tracing.service;system_fw;system_fw;System;
-system-default-target-done.service;system_fw;system_fw;System;
-system-delayed-target-done.service;system_fw;system_fw;System;
-system-delayed-target-trigger.service;root;root;System;
-systemd-ask-password-console.service;root;root;System;
-systemd-ask-password-wall.service;root;root;System;
-systemd-binfmt.service;root;root;System;
-systemd-exit.service;root;root;System;
-systemd-fsck-root.service;root;root;System;
-systemd-fsck@.service;root;root;System;
-systemd-halt.service;root;root;System;
-systemd-hibernate-resume@.service;root;root;System;
-systemd-hibernate.service;root;root;System;
-systemd-hostnamed.service;root;root;System;
-systemd-hwdb-update.service;root;root;System;
-systemd-hybrid-sleep.service;root;root;System;
-systemd-initctl.service;root;root;System;
-systemd-journal-catalog-update.service;root;root;System;
-systemd-journal-flush.service;root;root;System;
-systemd-journald.service;root;root;System;
-systemd-kexec.service;root;root;System;
-systemd-localed.service;root;root;System;
-systemd-logind.service;root;root;System::Privileged;
-systemd-machine-id-commit.service;root;root;System;
-systemd-modules-load.service;root;root;System;
-systemd-nspawn@.service;root;root;System;
-systemd-poweroff.service;root;root;System;
-systemd-quotacheck.service;root;root;System;
-systemd-reboot.service;root;root;System;
-systemd-remount-fs.service;root;root;System;
-systemd-suspend.service;root;root;System;
-systemd-sysctl.service;root;root;System;
-systemd-tmpfiles-setup-dev.service;root;root;System::Privileged;
-systemd-tmpfiles-setup.service;root;root;System::Privileged;
-systemd-udev-settle.service;root;root;System;
-systemd-udev-trigger.service;root;root;System;
-systemd-udevd.service;root;root;System::Privileged;
-systemd-update-done.service;root;root;System;
-systemd-update-utmp-runlevel.service;root;root;System;
-systemd-update-utmp.service;root;root;System;
-systemd-user-sessions.service;root;root;System;
-systemd-vconsole-setup.service;root;root;System;
-telephony-daemon.service;telephony;telephony;System;
-tizen-system-env.service;root;root;System;
-tizenid.service;system_fw;system_fw;System;
-tlm.service;root;root;User;
-ttrace-marker.service;system_fw;system_fw;System;
-ua-manager.service;network_fw;network_fw;System;
-udev-sdb-init.service;root;root;System;
-usb-host-ffs-test-daemon.service;system_fw;system_fw;System;
-user@.service;%i;users;User; # Need to be defined group
-__user@.service;%i;;User; # Need to be defined group
-wait-mount@.service;system_fw;system_fw;System;
-webappenc-initializer.service;security_fw;security_fw;System;
-wifi-direct-manager.service;network_fw;network_fw;System;
-wmeshd.service;network_fw;network_fw;System
-zigbee-daemon.service;network_fw;network_fw;System
+;ac.service;app_fw;app_fw;System;
+;actd.service;root;root;System;
+;alarm-server.service;app_fw;app_fw;System;
+;asp-manager.service;network_fw;network_fw;System;
+;audit-trail.service;security_fw;security_fw;System;
+;auth-fw.service;security_fw;security_fw;System;
+;bluetooth-ag-agent.service;network_fw;network_fw;System;
+;bluetooth.service;network_fw;network_fw;System;
+;bluetooth-address.service;network_fw;network_fw;System;
+;bluetooth-force-hci-logger.service;network_fw;network_fw;System;
+;bluetooth-frwk.service;network_fw;network_fw;System;
+;bluetooth-frwk-core.service;network_fw;network_fw;System;
+;bluetooth-hci-down.service;network_fw;network_fw;System;
+;bluetooth-hci-dump@.service;network_fw;network_fw;System;
+;bluetooth-hci-logger.service;network_fw;network_fw;System;
+;bluetooth-hci-logger-stop.service;network_fw;network_fw;System;
+;bluetooth-hci-up.service;network_fw;network_fw;System;
+;bluetooth-share-start.service;network_fw;network_fw;System;
+;bluetooth-stack-down.service;root;root;System;
+;bluetooth-stack-up.service;network_fw;network_fw;System;
+;bluez-start.service;network_fw;network_fw;System;
+;booting-done.service;system_fw;system_fw;System;
+;browser-provider.service;web_fw;web_fw;System;
+;buxton2.service;buxton;buxton;System;
+;capi-ui-sticker.service;ui_fw;ui_fw;System;
+;capmgr.service;app_fw;app_fw;System;
+;central-key-manager.service;key-manager;security_fw;System;
+;cert-server.service;security_fw;security_fw;System;
+;chromium-efl.service;root;root;System::Privileged;
+;chromium-efl-install.service;web_fw;web_fw;System;
+;chromium-efl-update.service;root;root;System::Privileged;
+;clat.service;network_fw;network_fw;System;
+;connman-vpn.service;network_fw;network_fw;System;
+;connman.service;network_fw;network_fw;System;
+;console-getty.service;root;root;System;
+;console-shell.service;root;root;System;
+;container-getty@.service;root;root;System;
+;crash-service.service;crash_worker;crash_worker;System;
+;csr.service;security_fw;security_fw;System;
+;cynara.service;cynara;cynara;System;
+;data-provider-master.service;app_fw;app_fw;System;
+;dbus.service;dbus;dbus;System;
+;debug-shell.service;root;root;System;
+;device-certificate-manager.service;security_fw;security_fw;System;
+;device-policy-manager.service;security_fw;security_fw;System;
+;device-policy-syspopup.service;security_fw;security_fw;System;
+;deviced.service;root;root;System::Privileged;
+;display-manager.service;root;root;System;
+;display-manager-monitor.service;graphic_fw;graphic_fw;System;
+;dlog_cleanup.service;log;log;System;
+;dlog_logger.service;log;log;System;
+;download-provider.service;web_fw;web_fw;System;
+;dummyasm.service;service_fw;service_fw;System;
+;edge-orchestration.service;system_fw;system_fw;System;
+;emergency.service;root;root;System;
+;esd.service;app_fw;app_fw;System;
+;feedbackd.service;system_fw;system_fw;System;
+;fido.service;service_fw;service_fw;System;
+;fido-asm.service;service_fw;service_fw;System;
+;fido-bt-roaming-agent.service;service_fw;service_fw;System;
+;focus-server.service;multimedia_fw;multimedia_fw;System;
+;getty@.service;root;root;User::Shell;
+;gumd.service;root;root;System::Privileged;
+;gumd.service;root;root;System;
+;init-update.service;root;root;System::Privileged;
+;initrd-cleanup.service;root;root;System;
+;initrd-parse-etc.service;root;root;System;
+;initrd-switch-root.service;root;root;System;
+;initrd-udevadm-cleanup-db.service;root;root;System;
+;inm-manager.service;network_fw;network_fw;System;
+;kmod-static-nodes.service;root;root;System;
+;ldconfig.service;root;root;System;
+;license-manager-agent.service;security_fw;security_fw;System;
+;log_dump.service;root;root;System;
+;log_dump.service;system_fw;system_fw;System; # conditionaly used
+;mdgd.service;network_fw;network_fw;System;
+;media-server.service;multimedia_fw;multimedia_fw;System;
+;mediacontroller.service;multimedia_fw;multimedia_fw;System;
+;mobileap-agent.service;network_fw;network_fw;System;
+;mtp-initiator.service;network_fw;network_fw;System;
+;mm-resource-managerd.service;multimedia_fw;multimedia_fw;System;
+;murphyd.service;multimedia_fw;multimedia_fw;System;
+;muse-server.service;multimedia_fw;multimedia_fw;System;
+;net-config.service;network_fw;network_fw;System;
+;nether.service;security_fw;security_fw;System;
+;ode.service;root;root;System::Privileged;
+;ode-progress-ui@.service;application;application;System;
+;offline-update.service;root;root;System::Privileged;
+;opt-usr-fsck.service;system_fw;disk;System;
+;package-manager.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System;
+;pass.service;system_fw;system_fw;System;
+;phonenumber-utils.service;service_fw;service_fw;System;
+;pkg-db-recovery.service;root;root;System;
+;pkgdir-tool.service;app_fw;app_fw;System;
+;privacy-guard-server.service;security_fw;security_fw;System;
+;pulseaudio.service;root;root;System;
+;pushd.service;service_fw;service_fw;System;
+;quotaon.service;root;root;System;
+;rescue.service;root;root;System;
+;resize2fs@.service;root;root;System;
+;resourced.service;root;root;System;
+;rndis.service;network_fw;network_fw;System;
+;sdbd.service;sdk;sdk;System;
+;sdbd_tcp.service;sdk;sdk;System;
+;security-manager-cleanup.service;root;root;System::Privileged;
+;security-manager-rules-loader.service;root;root;System::Privileged;
+;security-manager.service;root;root;System::Privileged;
+;serial-getty@.service;root;root;User::Shell;
+;sound-server.service;multimedia_fw;multimedia_fw;System;
+;stability-monitor.service;stability_monitor;stability_monitor;System;
+;stc-iptables.service;network_fw;network_fw;System;
+;stc-manager.service;root;root;System;
+;storaged.service;root;root;System::Privileged;
+;sys-kernel-tracing.service;system_fw;system_fw;System;
+;system-default-target-done.service;system_fw;system_fw;System;
+;system-delayed-target-done.service;system_fw;system_fw;System;
+;system-delayed-target-trigger.service;root;root;System;
+;systemd-ask-password-console.service;root;root;System;
+;systemd-ask-password-wall.service;root;root;System;
+;systemd-binfmt.service;root;root;System;
+;systemd-exit.service;root;root;System;
+;systemd-fsck-root.service;root;root;System;
+;systemd-fsck@.service;root;root;System;
+;systemd-halt.service;root;root;System;
+;systemd-hibernate-resume@.service;root;root;System;
+;systemd-hibernate.service;root;root;System;
+;systemd-hostnamed.service;root;root;System;
+;systemd-hwdb-update.service;root;root;System;
+;systemd-hybrid-sleep.service;root;root;System;
+;systemd-initctl.service;root;root;System;
+;systemd-journal-catalog-update.service;root;root;System;
+;systemd-journal-flush.service;root;root;System;
+;systemd-journald.service;root;root;System;
+;systemd-kexec.service;root;root;System;
+;systemd-localed.service;root;root;System;
+;systemd-logind.service;root;root;System::Privileged;
+;systemd-machine-id-commit.service;root;root;System;
+;systemd-modules-load.service;root;root;System;
+;systemd-nspawn@.service;root;root;System;
+;systemd-poweroff.service;root;root;System;
+;systemd-quotacheck.service;root;root;System;
+;systemd-reboot.service;root;root;System;
+;systemd-remount-fs.service;root;root;System;
+;systemd-suspend.service;root;root;System;
+;systemd-sysctl.service;root;root;System;
+;systemd-tmpfiles-setup-dev.service;root;root;System::Privileged;
+;systemd-tmpfiles-setup.service;root;root;System::Privileged;
+;systemd-udev-settle.service;root;root;System;
+;systemd-udev-trigger.service;root;root;System;
+;systemd-udevd.service;root;root;System::Privileged;
+;systemd-update-done.service;root;root;System;
+;systemd-update-utmp-runlevel.service;root;root;System;
+;systemd-update-utmp.service;root;root;System;
+;systemd-user-sessions.service;root;root;System;
+;systemd-vconsole-setup.service;root;root;System;
+;telephony-daemon.service;telephony;telephony;System;
+;tizen-system-env.service;root;root;System;
+;tizenid.service;system_fw;system_fw;System;
+;tlm.service;root;root;User;
+;ttrace-marker.service;system_fw;system_fw;System;
+;ua-manager.service;network_fw;network_fw;System;
+;udev-sdb-init.service;root;root;System;
+;usb-host-ffs-test-daemon.service;system_fw;system_fw;System;
+;user@.service;%i;users;User; # Need to be defined group
+;__user@.service;%i;;User; # Need to be defined group
+;wait-mount@.service;system_fw;system_fw;System;
+;webappenc-initializer.service;security_fw;security_fw;System;
+;wifi-direct-manager.service;network_fw;network_fw;System;
+;wmeshd.service;network_fw;network_fw;System;
+;zigbee-daemon.service;network_fw;network_fw;System;
-net.asp.service;network_fw;
-net.connman.service;network_fw;
-net.connman.vpn.service;network_fw;
-net.inm-manager.service;network_fw;
-net.mdgd.service;network_fw;
-net.netconfig.service;network_fw;
-net.uamd.service;network_fw;
-net.wifidirect.service;network_fw;
-org.O1.SecurityAccounts.gUserManagement.service;root;
-org.bluez.ag_agent.service;network_fw;
-org.bluez.hid_agent.service;network_fw;
-org.bluez.hf_agent.service;root;
-org.bluez.obex.service;network_fw;
-org.freedesktop.locale1.service;root;
-org.freedesktop.login1.service;root;
-org.freedesktop.systemd1.service;root;
-org.projectx.bt.service;root;
-org.projectx.bt_core.service;root;
-org.tizen.MobileapAgent.service;network_fw;
-org.tizen.PhonenumberUtils.dbus.service;service_fw;
-org.tizen.SmartcardService.service;network_fw;
-org.tizen.account.manager.service;root;
-org.tizen.alarm.manager.service;root;
-org.tizen.data-provider-master.service;app_fw;
-org.tizen.dpm.syspopup.service;security_fw;
-org.tizen.dummyasm.service;service_fw;
-org.tizen.factory-reset.service;root;
-org.tizen.fido-asm.service;service_fw;
-org.tizen.fido-bt-roaming.service;service_fw;
-org.tizen.fido.service;root;
-org.tizen.lbs.Providers.LbsServer.service;location;
-org.tizen.NetNfcService.service;network_fw;
-org.tizen.orchestration.service;system_fw;
-org.tizen.pkg_recovery.service;root;
-org.tizen.pkgdir_tool.service;root;
-org.tizen.pkgmgr.service;root;
-org.tizen.SoundServer.service;root;
-org.tizen.smartreply.service;ui_fw;
-org.tizen.system.crash.service;root;
-org.tizen.system.deviced.service;root;
-org.tizen.system.popup.service;root;
-org.tizen.system.storage.service;root;
-org.tizen.system.vibrator.service;system_fw;
-org.tizen.voice.ttsinterruptserver.service;ui_fw;
-org.tizen.voice.ttsnotiserver.service;ui_fw;
-org.tizen.voice.ttsserver.service;ui_fw;
-org.tizen.voice.ttssrserver.service;ui_fw;
-org.tizen.zigbee.service;network_fw;
--- /dev/null
+;syslog.socket;;;0666;;;
+;usb-host-test.socket;;;;;;
+;mediacontroller.socket;multimedia_fw;multimedia_fw;;;;
+;csr-cs.socket;;;0777;*;@;
+;cynara-monitor-get.socket;;security_fw;0060;@;@;
+;auth-fw-passwd-check.socket;security_fw;security_fw;0777;*;@;
+;systemd-journald-audit.socket;;;;;;
+;download-provider.socket;;;0777;;;
+;csr-admin.socket;;;0777;*;@;
+;csr-wp.socket;;;0777;*;@;
+;mtp-responder.socket;;;;;;
+;nfc-manager.socket;;;0777;*;@;
+;cynara.socket;;;0777;*;@;
+;central-key-manager-api-control.socket;;;0777;*;@;
+;systemd-udevd-control.socket;;;0600;;;
+;auth-fw-passwd-reset.socket;security_fw;security_fw;0777;*;@;
+;cynara-agent.socket;;security_fw;0060;*;@;
+;ac.socket;;;0777;;;
+;auth-fw-passwd-set.socket;security_fw;security_fw;0777;*;@;
+;cert-server.socket;security_fw;security_fw;0777;;;
+;msg-server.socket;messaging;messaging;;;;
+;buxton2.socket;;;0777;*;@;
+;security-manager.socket;;;0777;*;@;
+;ode.socket;;;;*;@;
+;device-policy-manager.socket;security_fw;security_fw;0777;*;@;
+;sdbd.socket;;;;;;
+;cynara-admin.socket;;;0700;@;@;
+;central-key-manager-api-storage.socket;;;0777;*;@;
+;systemd-udevd-kernel.socket;;;;;;
+;central-key-manager-api-ocsp.socket;;;0777;*;@;
+;systemd-journald.socket;;;0666;;;
+;systemd-journald-dev-log.socket;;;0666;;;
+;sensord.socket;sensor;input;0777;*;@;
+;connman.socket;;;;*;@;
+;auth-fw-passwd-policy.socket;security_fw;security_fw;0777;*;@;
+;audit-trail.socket;security_fw;security_fw;0755;*;@;
+;sdbd_tcp.socket;;;;*;@;
+;systemd-initctl.socket;;;0600;;;
+;central-key-manager-api-encryption.socket;;;0777;*;@;
+;swap_manager.socket;owner;users;;*;@;
+;device-certificate-manager.socket;;;0777;*;@;
+;dbus.socket;;;;*;@;
+
webappenc-initializer.service;security_fw;security_fw;System;
wifi-direct-manager.service;network_fw;network_fw;System;
wifi-ready.service;network_fw;network_fw;System;
-wmeshd.service;network_fw;network_fw;System
-zigbee-daemon.service;network_fw;network_fw;System
+wmeshd.service;network_fw;network_fw;System;
+zigbee-daemon.service;network_fw;network_fw;System;
projects / platform / core / security / security-config.git / commitdiff