Modification about smack label of db file belong to process. 69/20569/2 accepted/tizen_3.0.2014.q3_common accepted/tizen_3.0.m14.3_ivi tizen_3.0.2014.q3_common tizen_3.0.2014.q4_common tizen_3.0.2015.q1_common tizen_3.0.m14.2_ivi tizen_3.0.m14.3_ivi tizen_3.0_ivi accepted/tizen/common/20140519.224149 accepted/tizen/ivi/20140521.164853 accepted/tizen/mobile/20140602.132445 submit/tizen/20140516.060908 submit/tizen_mobile/20141120.000000 tizen_3.0.2014.q3_common_release tizen_3.0.m14.2_ivi_release tizen_3.0.m14.3_ivi_release tizen_3.0_ivi_release
authorjooseong.lee <jooseong.lee@samsung.com>
Fri, 9 May 2014 09:02:59 +0000 (18:02 +0900)
committerjooseong lee <jooseong.lee@samsung.com>
Fri, 9 May 2014 09:02:37 +0000 (02:02 -0700)
[Problem]
Most db files have 'floor' label.  Because these are created when binary is built.
No process can write db (since 'floor' label allows only read and execute)

[Solution]
Modify smack label based on below condition and three domain model
Condition1. Assign domain of process creates db files
Condition2. Assign domain of process uses db files.

Change-Id: I4e7ae01dc4b386e5df73713459917806b9d5ef5a
Signed-off-by: jooseong.lee <jooseong.lee@samsung.com>
packaging/libshortcut.manifest

index 017d22d..bae3b87 100644 (file)
@@ -2,4 +2,7 @@
  <request>
     <domain name="_"/>
  </request>
+ <assign>
+    <filesystem path="/opt/dbspace/.shortcut_service.db*" label="User" />
+ </assign>
 </manifest>