Add to check uid
authorChanggyu Choi <changyu.choi@samsung.com>
Tue, 27 Apr 2021 05:41:54 +0000 (14:41 +0900)
committer최창규/Tizen Platform Lab(SR)/Engineer/삼성전자 <changyu.choi@samsung.com>
Fri, 30 Apr 2021 04:17:23 +0000 (13:17 +0900)
If sender's uid is system uid, pass privilege check.

Change-Id: Ib6f34af5a2247c73f214e6c6211a58657bffb626

src/server/runner.cc

index 1dae51a..9be0859 100644 (file)
@@ -117,7 +117,7 @@ void StatusCb(int old_fd, int new_fd, cynara_async_status status, void* data) {
 void CheckPrivilege(Runner* runner,
     const std::shared_ptr<PkgRequest>& req,
     const std::vector<std::string>& privileges) {
-  if (privileges.empty()) {
+  if (privileges.empty() || req->GetSenderUID() < REGULAR_USER) {
     LOGD("Allowed request");
     runner->QueueRequest(req);
     return;
@@ -147,9 +147,6 @@ void CheckPrivilege(Runner* runner,
   std::unique_ptr<char, decltype(std::free)*> sessPtr(session, std::free);
   cynara_check_id id;
   bool check = false;
-
-
-
   for (auto& priv : privileges) {
     ret = cynara_async_create_request(cynara, smack_label, session,
         std::to_string(req->GetSenderUID()).c_str(), priv.c_str(),