crash-service: Simplify the diagnostics get_file access control 23/251823/2
authorKarol Lewandowski <k.lewandowsk@samsung.com>
Tue, 19 Jan 2021 12:17:14 +0000 (13:17 +0100)
committerKarol Lewandowski <k.lewandowsk@samsung.com>
Tue, 19 Jan 2021 16:24:29 +0000 (17:24 +0100)
Root is impicitly allowed by <check ..> directive, there is no need
for separate section for this.

Change-Id: I8ff19674fd2610ab1255db14658ae0e1ceeab5e1

src/crash-service/crash-service.conf

index 69bb35c..4505243 100644 (file)
@@ -2,22 +2,13 @@
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
 <busconfig>
        <policy user="root">
-               <allow own="org.tizen.system.diagnostics"/>
-               <allow send_destination="org.tizen.system.diagnostics"
-                      send_interface="org.tizen.system.diagnostics"
-                      send_member="get_file"/>
-
                <allow send_destination="org.tizen.system.crash.livedump"
                       send_interface="org.tizen.system.crash.livedump"
                       send_member="livedump_pid"/>
        </policy>
        <policy user="crash_worker">
                <allow own="org.tizen.system.crash.livedump"/>
-
                <allow own="org.tizen.system.diagnostics"/>
-               <allow send_destination="org.tizen.system.diagnostics"
-                      send_interface="org.tizen.system.diagnostics"
-                      send_member="get_file"/>
        </policy>
        <policy group="priv_livecoredump">
                <!-- following section also permits applications with