policy: Do not deny delivery of signals 72/190072/1
authorKarol Lewandowski <k.lewandowsk@samsung.com>
Mon, 24 Sep 2018 11:53:16 +0000 (13:53 +0200)
committerKichan Kwon <k_c.kwon@samsung.com>
Thu, 27 Sep 2018 04:41:33 +0000 (13:41 +0900)
Deny only D-Bus method calls as resourced need to receive various
system signals (eg. aul's AppStatusChange) and act on them.

Change-Id: Ic4bb7c0d38608c7e21ed7a3b4e2cf9d3262e171e

packaging/resourced-headless.conf

index b5d4631c1dbbd99eedeb65681c6eb6c8ab1bfc37..cc38a702175f3ab60f128ffb38f7487f713d0d74 100644 (file)
@@ -6,14 +6,12 @@
         <allow send_destination="org.tizen.resourced"/>
     </policy>
 
-    <policy user="app_fw">
-        <deny own="org.tizen.resourced"/>
-        <allow send_destination="org.tizen.resourced"/>
-    </policy>
-
     <policy context="default">
         <deny own="org.tizen.resourced"/>
-        <deny send_destination="org.tizen.resourced"/>
+
+        <deny send_destination="org.tizen.resourced"
+            send_type="method_call"/>
+
         <check send_destination="org.tizen.resourced"
             send_interface="org.tizen.resourced.process"
             privilege="http://tizen.org/privilege/systemmonitor"/>