Requires: shadow-utils
Requires: libcap-tools
+%{!?TZ_SYS_RO_SHARE: %global TZ_SYS_RO_SHARE /usr/share}
+%global SECURITY_TEST_DIR %{TZ_SYS_RO_SHARE}/security-config/test
+
%description
set of important system configuration and
setup files, such as passwd, group, and profile.
mkdir -p %{buildroot}/%{_unitdir}/multi-user.target.wants
ln -s ../%{name}.service %{buildroot}/%{_unitdir}/multi-user.target.wants/%{name}.service
+mkdir -p %{buildroot}%{SECURITY_TEST_DIR}/utils
+%ifarch %{arm}
+cp -f test/utils/arm/* %{buildroot}%{SECURITY_TEST_DIR}/utils/
+%endif
+%ifarch x86_64
+cp -f test/utils/x86_64/* %{buildroot}%{SECURITY_TEST_DIR}/utils/
+%endif
+%ifarch aarch64
+cp -f test/utils/aarch64/* %{buildroot}%{SECURITY_TEST_DIR}/utils/
+%endif
+%ifarch %{ix86}
+cp -f test/utils/i386/* %{buildroot}%{SECURITY_TEST_DIR}/utils/
+%endif
+
%post
/usr/share/security-config/group_id_setting
/usr/share/security-config/set_label
mkdir -p /opt/share/security-config/log
touch /opt/share/askuser_disable
chmod 600 /opt/share/askuser_disable
+ln -s %{SECURITY_TEST_DIR} /opt/share/security-config/test
%post profile_mobile
-mv /opt/share/security-config/test/root_test/mobile/* /opt/share/security-config/test/root_test/
-mv /opt/share/security-config/test/capability_test/mobile/* /opt/share/security-config/test/capability_test/
-mv /opt/share/security-config/test/new_service_test/list/mobile/* /opt/share/security-config/test/new_service_test/
-rm -r /opt/share/security-config/test/root_test/mobile/
-rm -r /opt/share/security-config/test/root_test/wearable/
-rm -r /opt/share/security-config/test/capability_test/mobile/
-rm -r /opt/share/security-config/test/capability_test/wearable/
-rm -r /opt/share/security-config/test/new_service_test/list/
+mv %{SECURITY_TEST_DIR}//capability_test/mobile/* %{SECURITY_TEST_DIR}/capability_test/
+mv %{SECURITY_TEST_DIR}//new_service_test/list/mobile/* %{SECURITY_TEST_DIR}/new_service_test/
+rm -r %{SECURITY_TEST_DIR}/capability_test/mobile/
+rm -r %{SECURITY_TEST_DIR}/capability_test/wearable/
+rm -r %{SECURITY_TEST_DIR}/new_service_test/list/
rm -f /opt/share/askuser_disable
%postun profile_mobile
-rm /opt/share/security-config/test/root_test/*
-rm /opt/share/security-config/test/capability_test/*
-rm /opt/share/security-config/test/new_service_test/*
+rm %{SECURITY_TEST_DIR}/capability_test/*
+rm %{SECURITY_TEST_DIR}/new_service_test/*
%post profile_wearable
-mv /opt/share/security-config/test/root_test/wearable/* /opt/share/security-config/test/root_test/
-mv /opt/share/security-config/test/capability_test/wearable/* /opt/share/security-config/test/capability_test/
-mv /opt/share/security-config/test/new_service_test/list/wearable/* /opt/share/security-config/test/new_service_test/
-rm -r /opt/share/security-config/test/root_test/mobile/
-rm -r /opt/share/security-config/test/root_test/wearable/
-rm -r /opt/share/security-config/test/capability_test/mobile/
-rm -r /opt/share/security-config/test/capability_test/wearable/
-rm -r /opt/share/security-config/test/new_service_test/list/
+mv %{SECURITY_TEST_DIR}/capability_test/wearable/* %{SECURITY_TEST_DIR}/capability_test/
+mv %{SECURITY_TEST_DIR}/new_service_test/list/wearable/* %{SECURITY_TEST_DIR}/new_service_test/
+rm -r %{SECURITY_TEST_DIR}/capability_test/mobile/
+rm -r %{SECURITY_TEST_DIR}/capability_test/wearable/
+rm -r %{SECURITY_TEST_DIR}/new_service_test/list/
rm -f /opt/share/askuser_disable
%postun profile_wearable
-rm /opt/share/security-config/test/root_test/*
-rm /opt/share/security-config/test/capability_test/*
-rm /opt/share/security-config/test/new_service_test/*
+rm %{SECURITY_TEST_DIR}/capability_test/*
+rm %{SECURITY_TEST_DIR}/new_service_test/*
%post profile_tv
-mv /opt/share/security-config/test/new_service_test/list/tv/* /opt/share/security-config/test/new_service_test/
-rm -r /opt/share/security-config/test/new_service_test/list/
+mv %{SECURITY_TEST_DIR}/new_service_test/list/tv/* %{SECURITY_TEST_DIR}/new_service_test/
+rm -r %{SECURITY_TEST_DIR}/new_service_test/list/
%postun profile_tv
-rm /opt/share/security-config/test/new_service_test/*
+rm %{SECURITY_TEST_DIR}/new_service_test/*
%files
%manifest %{_datadir}/%{name}.manifest
%attr(755,root,root) /usr/share/security-config/mdm_blacklist
%attr(700,root,root) /usr/share/security-config/update_privacy_mount_list.sh
%attr(644,root,root) /usr/lib/tmpfiles.d/security-config.conf
-%attr(755,root,root) /opt/share/security-config/test/image_test.sh
-%attr(755,root,root) /opt/share/security-config/test/aslr_test/*
-%attr(755,root,root) /opt/share/security-config/test/utils/*
-%attr(755,root,root) /opt/share/security-config/test/dep_test/*
-%attr(755,root,root) /opt/share/security-config/test/setuid_test/*
-%attr(755,root,root) /opt/share/security-config/test/smack_rule_test/*
-%attr(755,root,root) /opt/share/security-config/test/root_test/*
-%attr(755,root,root) /opt/share/security-config/test/capability_test/*
-%attr(755,root,root) /opt/share/security-config/test/path_check_test/*
-%attr(755,root,root) /opt/share/security-config/test/smack_basic_test/*
-%attr(755,root,root) /opt/share/security-config/test/security_mount_option_test/*
-%attr(755,root,root) /opt/share/security-config/test/relro_stack_canary_test/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/image_test.sh
+%attr(755,root,root) %{SECURITY_TEST_DIR}/aslr_test/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/utils/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/dep_test/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/smack_rule_test/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/capability_test/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/path_check_test/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/smack_basic_test/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/security_mount_option_test/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/relro_stack_canary_test/*
%attr(755,root,root) /usr/share/upgrade/scripts/201.security_upgrade.sh
%attr(755,root,root) %{_sysconfdir}/gumd/useradd.d/90_user-content-permissions.post
%attr(755,root,root) %{_sysconfdir}/gumd/useradd.d/91_user-dbspace-permissions.post
%attr(-,root,root) %{_unitdir}/multi-user.target.wants/security-config.service
%attr(755,root,root) /usr/share/security-config/smack_default_labeling
%attr(644,root,root) /etc/smack/onlycap
-%attr(755,root,root) /opt/share/security-config/test/root_test/mobile/*
-%attr(755,root,root) /opt/share/security-config/test/capability_test/mobile/*
-%attr(755,root,root) /opt/share/security-config/test/new_service_test/check_new_service.sh
-%attr(755,root,root) /opt/share/security-config/test/new_service_test/list/mobile/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/capability_test/mobile/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/check_new_service.sh
+%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/list/mobile/*
%files profile_wearable
%license LICENSE
%attr(-,root,root) %{_unitdir}/multi-user.target.wants/security-config.service
%attr(755,root,root) /usr/share/security-config/smack_default_labeling
%attr(644,root,root) /etc/smack/onlycap
-%attr(755,root,root) /opt/share/security-config/test/root_test/wearable/*
-%attr(755,root,root) /opt/share/security-config/test/capability_test/wearable/*
-%attr(755,root,root) /opt/share/security-config/test/new_service_test/check_new_service.sh
-%attr(755,root,root) /opt/share/security-config/test/new_service_test/list/wearable/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/capability_test/wearable/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/check_new_service.sh
+%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/list/wearable/*
%files profile_tv
%license LICENSE
-%attr(755,root,root) /opt/share/security-config/test/new_service_test/check_new_service.sh
-%attr(755,root,root) /opt/share/security-config/test/new_service_test/list/tv/*
-
+%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/check_new_service.sh
+%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/list/tv/*
INSTALL(FILES
image_test.sh
DESTINATION
- /opt/share/security-config/test/
+ /usr/share/security-config/test/
)
ADD_SUBDIRECTORY(utils)
ADD_SUBDIRECTORY(aslr_test)
ADD_SUBDIRECTORY(dep_test)
-ADD_SUBDIRECTORY(setuid_test)
ADD_SUBDIRECTORY(path_check_test)
ADD_SUBDIRECTORY(capability_test)
ADD_SUBDIRECTORY(smack_rule_test)
-ADD_SUBDIRECTORY(root_test)
ADD_SUBDIRECTORY(security_mount_option_test)
ADD_SUBDIRECTORY(smack_basic_test)
ADD_SUBDIRECTORY(new_service_test)
INSTALL(DIRECTORY
${CMAKE_SOURCE_DIR}/test/aslr_test/scripts
DESTINATION
- /opt/share/security-config/test/aslr_test
+ /usr/share/security-config/test/aslr_test
)
#!/bin/bash
PATH="/usr/bin:/bin:/usr/sbin:/sbin"
-utl_path="/opt/share/security-config/test/utils"
+utl_path="/usr/share/security-config/test/utils"
log_file="/opt/share/security-config/log/aslr_not_applied_files"
-exception_path="/opt/share/security-config/test/aslr_test/scripts/aslr_exception.list"
+exception_path="/usr/share/security-config/test/aslr_test/scripts/aslr_exception.list"
# Check whether this file is one of exception lists.
# args : $1 = file path
return 0
}
-# Rename file util
-file_cmd=`find $utl_path -name file.*`
-if [ "$file_cmd" != "" ]; then
- /bin/mv $file_cmd $utl_path/file
-fi
-
#init log
if [ -e "$log_file" ]
then
CHECK_EXCEPTION $log_file_line
if [ "$?" == 0 ]
then
- chmod a-x $log_file_line
+ chmod a-x $log_file_line
fi
fi
done < <(cat $log_file)
${SHELL_SCRIPT}
${CHECK_NEW_CAPABILITITES_EXCEPTION_LIST}
DESTINATION
- /opt/share/security-config/test/capability_test/wearable
+ /usr/share/security-config/test/capability_test/wearable
)
INSTALL(FILES
${SHELL_SCRIPT}
${CHECK_NEW_CAPABILITITES_EXCEPTION_LIST}
DESTINATION
- /opt/share/security-config/test/capability_test/mobile
+ /usr/share/security-config/test/capability_test/mobile
)
#!/bin/bash
PATH=/bin:/usr/bin:/sbin:/usr/sbin
-exception_list_path="/opt/share/security-config/test/capability_test/new_capabilities_exception.list"
+exception_list_path="/usr/share/security-config/test/capability_test/new_capabilities_exception.list"
result_file="/opt/share/security-config/result/check_new_capabilities.result"
log_file="/opt/share/security-config/log/check_new_capabilities.log"
-get_cap_tmp_path="/opt/share/security-config/test/capability_test/get_cap.list"
+get_cap_tmp_path="/opt/share/security-config/log/get_cap.list"
# check exception
# args : $1 = getcap result
{
check_result=$(/usr/bin/cat $exception_list_path | grep "$1")
if [ "$check_result" = "" ] # This seems newly added capability. Add to log file.
- then
+ then
echo "$1" >> $log_file
fi
}
else
echo "NO" > $result_file
fi
-
INSTALL(DIRECTORY
${CMAKE_SOURCE_DIR}/test/dep_test/scripts
DESTINATION
- /opt/share/security-config/test/dep_test
+ /usr/share/security-config/test/dep_test
)
#=========================================================
# [Includes]
#=========================================================
-. "/opt/share/security-config/test/utils/_sh_util_lib"
+. "/usr/share/security-config/test/utils/_sh_util_lib"
#=========================================================
# Script Begin
#=========================================================
$RM $result_file
$TOUCH $result_file
-# Rename utils
-file_cmd=`$FIND $utils_dir -name file*`
-execstack_cmd=`$FIND $utils_dir -name execstack*`
-if [ "$file_cmd" != "" ]; then
- $MV $file_cmd $utils_dir/file
-fi
-
#set required so
LIBELF="libelf-0.153.so"
LIBELF_LN="libelf.so.0"
#!/bin/bash
PATH=/bin:/usr/bin:/sbin:/usr/sbin
-security_test_path="/opt/share/security-config/test"
+security_test_path="/usr/share/security-config/test"
log_path="/opt/share/security-config/log"
log_file="$log_path/image_test_log"
+++ /dev/null
-#!/bin/bash
-#=========================================================
-# [First of All] Get the directory path and name of this script
-#=========================================================
-script_path=$(readlink -f "$0")
-script_dir=`dirname $script_path`
-script_name=`basename $script_path`
-#=========================================================
-# [Variables]
-#=========================================================
-src_base_dir="$script_dir"
-target_base_dir="/opt/share/security-config/test"
-utils_dir="$target_base_dir/utils"
-
-src_root_test_dir="$src_base_dir/root_test"
-target_root_test_dir="$target_base_dir/root_test"
-
-src_capability_test_dir="$src_base_dir/capability_test"
-target_capability_test_dir="$target_base_dir/capability_test"
-
-src_smack_rule_test_dir="$src_base_dir/smack_rule_test"
-target_smack_rule_test_dir="$target_base_dir/smack_rule_test"
-
-src_setuid_test_dir="$src_base_dir/setuid_test"
-target_setuid_test_dir="$target_base_dir/setuid_test"
-
-src_path_check_test_dir="$src_base_dir/path_check_test"
-target_path_check_test_dir="$target_base_dir/path_check_test"
-#=========================================================
-# Script Begin
-#=========================================================
-
-sdb root on
-
-###############################
-# Check profile and arch
-###############################
-profile_info=`sdb shell cat /etc/info.ini | grep "Build="`
-
-if [[ $profile_info == *"mobile"* ]]
-then
- profile="mobile"
-elif [[ $profile_info == *"wearable"* ]]
-then
- profile="wearable"
-else
- echo "Unknow profile!!"
- exit 1
-fi
-
-arch_info=`sdb shell $utils_dir/file* $utils_dir/file*`
-if [[ $arch_info == *"aarch64"* ]]
-then
- arch="aarch64"
- arch_dir="emul"
-elif [[ $arch_info == *"ARM"* ]]
-then
- arch="arm"
- arch_dir="target"
-elif [[ $arch_info == *"x86-64"* ]]
-then
- arch="x86_64"
- arch_dir="target"
-elif [[ $arch_info == *"Intel"* ]]
-then
- arch="i386"
- arch_dir="emul"
-fi
-
-echo "#========================================================="
-echo "# profile = $profile, arch = $arch"
-echo "#========================================================="
-
-# push root_test lists
-sdb push $src_root_test_dir/list/$arch_dir/$profile/*.stable $target_root_test_dir
-
-# push capability_test lists
-sdb push $src_capability_test_dir/list/$arch_dir/$profile/*.stable $target_capability_test_dir
-
-# push smack_rule_test lists
-sdb push $src_smack_rule_test_dir/*.stable $target_smack_rule_test_dir
-
-# push setuid_test list
-sdb push $src_setuid_test_dir/scripts/*.stable $target_setuid_test_dir/scripts
-
-# push path_check_test list
-sdb push $src_path_check_test_dir/*.stable $target_path_check_test_dir
-
-echo "#========================================================="
-echo "# Set exception lists ... "
-echo "#========================================================="
-#######################################
-# Replace original exception lists
-#######################################
-for files in `sdb shell find $target_base_dir -name *"\.stable"`
-do
- files=`echo $files | tr -d '\r'`
- file_changes=${files%.*}
- echo "$file_changes"
- sdb shell mv $files $file_changes
-done
-echo ""
INSTALL(DIRECTORY
${TARGET_LISTS}
DESTINATION
- /opt/share/security-config/test/new_service_test/list)
+ /usr/share/security-config/test/new_service_test/list)
ELSEIF(("${ARCH}" STREQUAL "i386") OR ("${ARCH}" STREQUAL "x86_64"))
INSTALL(DIRECTORY
${EMULATOR_LISTS}
DESTINATION
- /opt/share/security-config/test/new_service_test/list)
+ /usr/share/security-config/test/new_service_test/list)
ENDIF()
INSTALL(FILES
${SHELL_SCRIPT}
DESTINATION
- /opt/share/security-config/test/new_service_test
+ /usr/share/security-config/test/new_service_test
)
result_file="/opt/share/security-config/result/new_service.result"
log_file="/opt/share/security-config/log/new_service.log"
-dbus_service_list="/opt/share/security-config/test/new_service_test/dbus_service.list"
-systemd_service_list="/opt/share/security-config/test/new_service_test/systemd_service.list"
+dbus_service_list="/usr/share/security-config/test/new_service_test/dbus_service.list"
+systemd_service_list="/usr/share/security-config/test/new_service_test/systemd_service.list"
not_permitted_service_path="/opt/share/security-config/not_permitted_service/"
# function to check whether it is included in list files
${SHELL_SCRIPT}
path_exception.list
DESTINATION
- /opt/share/security-config/test/path_check_test
+ /usr/share/security-config/test/path_check_test
)
#!/bin/bash
PATH="/usr/bin:/bin:/usr/sbin:/sbin"
-utl_path="/opt/share/security-config/test/utils"
+utl_path="/usr/share/security-config/test/utils"
result_file="/opt/share/security-config/result/path_check.result"
log_file="/opt/share/security-config/log/path_check.log"
-exception_file="/opt/share/security-config/test/path_check_test/path_exception.list"
+exception_file="/usr/share/security-config/test/path_check_test/path_exception.list"
script_list_path="/opt/share/security-config/log/script_file_list"
# Check whether this file is one of exception lists.
INSTALL(FILES
${RELRO_STACK_CANARY_SCRIPT}
DESTINATION
- /opt/share/security-config/test/relro_stack_canary_test
+ /usr/share/security-config/test/relro_stack_canary_test
)
#!/bin/sh
PATH=/bin:/usr/bin:/sbin:/usr/sbin
-utl_path="/opt/share/security-config/test/utils"
+utl_path="/usr/share/security-config/test/utils"
relro_result_file="/opt/share/security-config/result/new_service.result"
stack_canary_result_file="/opt/share/security-config/result/new_service.result"
relro_log_file="/opt/share/security-config/log/relro.log"
then
rm $relro_log_file
fi
-
if [ -e "$stack_canary_log_file" ]
then
rm $stack_canary_log_file
+++ /dev/null
-CMAKE_MINIMUM_REQUIRED(VERSION 2.6)
-
-FILE(GLOB SHELL_SCRIPT *.sh)
-IF("${ARCH}" STREQUAL "arm")
- FILE(GLOB M_EXCEPTION_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/mobile/exception_list")
- FILE(GLOB M_NON_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/mobile/non_daemon_list")
- FILE(GLOB M_NON_ROOT_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/mobile/non_root_list")
- FILE(GLOB M_ROOT_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/mobile/root_daemon_list")
- FILE(GLOB W_EXCEPTION_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/wearable/exception_list")
- FILE(GLOB W_NON_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/wearable/non_daemon_list")
- FILE(GLOB W_NON_ROOT_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/wearable/non_root_list")
- FILE(GLOB W_ROOT_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/wearable/root_daemon_list")
-ELSEIF("${ARCH}" STREQUAL "aarch64")
- FILE(GLOB M_EXCEPTION_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/mobile/exception_list")
- FILE(GLOB M_NON_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/mobile/non_daemon_list")
- FILE(GLOB M_NON_ROOT_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/mobile/non_root_list")
- FILE(GLOB M_ROOT_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/mobile/root_daemon_list")
- FILE(GLOB W_EXCEPTION_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/wearable/exception_list")
- FILE(GLOB W_NON_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/wearable/non_daemon_list")
- FILE(GLOB W_NON_ROOT_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/wearable/non_root_list")
- FILE(GLOB W_ROOT_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/target/wearable/root_daemon_list")
-ELSEIF("${ARCH}" STREQUAL "i386")
- FILE(GLOB M_EXCEPTION_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/mobile/exception_list")
- FILE(GLOB M_NON_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/mobile/non_daemon_list")
- FILE(GLOB M_NON_ROOT_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/mobile/non_root_list")
- FILE(GLOB M_ROOT_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/mobile/root_daemon_list")
- FILE(GLOB W_EXCEPTION_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/wearable/exception_list")
- FILE(GLOB W_NON_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/wearable/non_daemon_list")
- FILE(GLOB W_NON_ROOT_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/wearable/non_root_list")
- FILE(GLOB W_ROOT_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/wearable/root_daemon_list")
-ELSEIF("${ARCH}" STREQUAL "x86_64")
- FILE(GLOB M_EXCEPTION_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/mobile/exception_list")
- FILE(GLOB M_NON_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/mobile/non_daemon_list")
- FILE(GLOB M_NON_ROOT_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/mobile/non_root_list")
- FILE(GLOB M_ROOT_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/mobile/root_daemon_list")
- FILE(GLOB W_EXCEPTION_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/wearable/exception_list")
- FILE(GLOB W_NON_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/wearable/non_daemon_list")
- FILE(GLOB W_NON_ROOT_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/wearable/non_root_list")
- FILE(GLOB W_ROOT_DAEMON_LIST "${CMAKE_SOURCE_DIR}/test/root_test/list/emul/wearable/root_daemon_list")
-ENDIF()
-INSTALL(FILES
- ${SHELL_SCRIPT}
- ${W_EXCEPTION_LIST}
- ${W_NON_DAEMON_LIST}
- ${W_NON_ROOT_LIST}
- ${W_ROOT_DAEMON_LIST}
- DESTINATION
- /opt/share/security-config/test/root_test/wearable
-)
-INSTALL(FILES
- ${SHELL_SCRIPT}
- ${M_EXCEPTION_LIST}
- ${M_NON_DAEMON_LIST}
- ${M_NON_ROOT_LIST}
- ${M_ROOT_DAEMON_LIST}
- DESTINATION
- /opt/share/security-config/test/root_test/mobile
-)
+++ /dev/null
-#!/bin/bash
-
-PATH=/bin:/usr/bin:/sbin:/usr/sbin
-SYSTEMD_PATH="/usr/lib/systemd/system/"
-DBUS_PATH="/usr/share/dbus-1/system-services/"
-ROOT_LIST="/opt/share/security-config/test/root_test/root_daemon_list"
-NON_DAEMON_LIST="/opt/share/security-config/test/root_test/non_daemon_list"
-NON_ROOT_LIST="/opt/share/security-config/test/root_test/non_root_list"
-EXCEPTION_LIST="/opt/share/security-config/test/root_test/exception_list"
-LOG_NEW_SERVICE="/opt/share/security-config/log/root_test_new_service.log"
-LOG_DELETED_DERVICE="/opt/share/security-config/log/root_test_deleted_service.log"
-RESULT_NEW_SERVICE="/opt/share/security-config/result/root_test_new_service.result"
-RESULT_DELETED_DERVICE="/opt/share/security-config/result/root_test_deleted_service.result"
-
-checkServiceFile(){
- # $1 : service_name
- # $2 : service_type
-
- # Try to find root service
-
- for line in $(/bin/cat $ROOT_LIST)
- do
- service_name=`/bin/echo $line | /usr/bin/awk -F "," '{print $1}'`
- if [ $1 = $service_name ]; then
- return 0
- fi
- done
-
- # Try to find non-daemon service
- for line in $(/bin/cat $NON_DAEMON_LIST)
- do
- service_name=`/bin/echo $line | /usr/bin/awk -F "," '{print $1}'`
- if [ $1 = $service_name ]; then
- return 0
- fi
- done
-
- # Try to find non-root daemon service
- for line in $(/bin/cat $NON_ROOT_LIST)
- do
- service_name=`/bin/echo $line | /usr/bin/awk -F "," '{print $1}'`
- if [ $1 = $service_name ]; then
- return 0
- fi
- done
-
- # Try to find exception case
- for line in $(/bin/cat $EXCEPTION_LIST)
- do
- service_name=`/bin/echo $line | /usr/bin/awk -F "," '{print $1}'`
- if [ $1 = $service_name ]; then
- return 0
- fi
- done
-
- # ## This service would be new daemon / service ##
- if [ "$2" = "systemd" ]; then
- /bin/echo "$SYSTEMD_PATH$1 is new service"
- /bin/echo "$SYSTEMD_PATH$1" >> $LOG_NEW_SERVICE
- elif [ "$2" = "dbus" ]; then
- /bin/echo "$DBUS_PATH$1 is new service"
- /bin/echo "$DBUS_PATH$1" >> $LOG_NEW_SERVICE
- fi
-}
-
-checkList() {
- # $1 : service_name
- # $2 : service_type
-
- flag=0
-
- for line in $SYSTEMD_PATH/*
- do
- service_name=`/usr/bin/basename "$line"`
- extension=`/bin/echo $service_name | /usr/bin/awk -F "." '{printf $NF}'`
- if [ "$extension" = "service" ]; then
- if [ $1 = $service_name ]; then
- #/bin/echo "$service_name is exist in systemd"
- flag=1
- return 0;
- fi
- fi
- done
-
- for line in $DBUS_PATH/*
-
- do
- service_name=`/usr/bin/basename "$line"`
- extension=`/bin/echo $service_name | /usr/bin/awk -F "." '{printf $NF}'`
- if [ "$extension" = "service" ]; then
- if [ $1 = $service_name ]; then
- #/bin/echo "$service_name is exist in dbus"
- return 0;
- fi
- fi
- done
-
- if [ "$extension" = "service" ]; then
- if [ $flag -eq 0 ]; then
- if [ "$2" = "systemd" ]; then
- /bin/echo "$SYSTEMD_PATH$1 is not exist"
- /bin/echo "$SYSTEMD_PATH$1" >> $LOG_DELETED_SERVICE
- elif [ "$2" = "dbus" ]; then
- /bin/echo "$DBUS_PATH$1 is not exist"
- /bin/echo "$DBUS_PATH$1" >> $LOG_DELETED_SERVICE
- fi
- fi
- fi
-}
-
-# Let's start service check whether service is added or removed
-if [ -f $LOG_NEW_SERVICE ]; then
- /bin/rm $LOG_NEW_SERVICE
-fi
-
-if [ -f $LOG_DELETED_DERVICE ]; then
- /bin/rm $LOG_DELETED_DERVICE
-fi
-
-/bin/echo "########################################"
-/bin/echo "Check New Service"
-/bin/echo "########################################"
-
-for entry in $SYSTEMD_PATH/*
-do
- service_name=`/usr/bin/basename "$entry"`
- extension=`/bin/echo $service_name | /usr/bin/awk -F "." '{print $NF}'`
-
- if [ "$extension" = "service" ]; then
- checkServiceFile $service_name "systemd"
- fi
-done
-
-for entry in $DBUS_PATH/*
-do
- service_name=`/usr/bin/basename "$entry"`
- extension=`/bin/echo $service_name | /usr/bin/awk -F "." '{print $NF}'`
- if [ "$extension" = "service" ]; then
- checkServiceFile $service_name "dbus"
- fi
-done
-
-/bin/echo "########################################"
-/bin/echo "Check Delete Service"
-/bin/echo "########################################"
-
-for entry in $(/bin/cat $ROOT_LIST)
-do
- service_name=`/bin/echo $entry | awk -F "," '{print $1}'`
- extension=`/bin/echo $entry | awk -F "," '{print $NF}'`
-
- checkList $service_name $extension
-done
-
-for entry in $(/bin/cat $NON_DAEMON_LIST)
-do
- service_name=`/bin/echo $entry | awk -F "," '{print $1}'`
- extension=`/bin/echo $entry | awk -F "." '{print $NF}'`
-
- checkList $service_name $extension
-done
-
-for entry in $(/bin/cat $NON_ROOT_LIST)
-do
- service_name=`/bin/echo $entry | awk -F "," '{print $1}'`
- extension=`/bin/echo $entry | awk -F "," '{print $NF}'`
-
- checkList $service_name $extension
-done
-
-if [ -f $LOG_NEW_SERVICE ]; then
- /bin/echo "NO" > $RESULT_NEW_SERVICE
-else
- /bin/echo "YES" > $RESULT_NEW_SERVICE
-fi
-
-if [ -f $LOG_DELETED_DERVICE ]; then
- /bin/echo "NO" > $RESULT_DELETED_DERVICE
-else
- /bin/echo "YES" > $RESULT_DELETED_DERVICE
-fi
+++ /dev/null
-pulseaudio.service,systemd,ID_DEFINED_IN_CODE,pulse,pulse
\ No newline at end of file
+++ /dev/null
-bluetooth-hci-device.service,systemd
-bluetooth-hciattach@.service,systemd
-bluetooth-address.service,systemd
-bluetooth-hci-logger.service,systemd
-bluetooth-force-hci-logger.service,systemd
-bluetooth-hci-dump@.service,systemd
-boot-animation.service,systemd
-console-getty.service,systemd
-console-shell.service,systemd
-container-getty@.service,systemd
-debug-shell.service,systemd
-device-policy-syspopup.service,systemd
-emergency.service,systemd
-factory-reset.service,systemd
-getty@.service,systemd
-init-update.service,systemd
-initrd-cleanup.service,systemd
-initrd-parse-etc.service,systemd
-initrd-switch-root.service,systemd
-initrd-udevadm-cleanup-db.service,systemd
-kmod-static-nodes.service,systemd
-lazy_mount.service,systemd
-ldconfig.service,systemd
-log_dump.service,systemd
-offline-update.service,systemd
-org.tizen.dummyasm.service,systemd
-pkg-db-recovery.service,systemd
-pkgdir-tool.service,systemd
-quotaon.service,systemd
-rescue.service,systemd
-resize2fs@.service,systemd
-security-config.service,systemd
-security-manager-rules-loader.service,systemd
-security-manager-cleanup.service,systemd
-shutdown-animation.service,systemd
-sys-kernel-tracing.service,systemd
-system-popup.service,systemd
-systemd-binfmt.service,systemd
-systemd-exit.service,systemd
-systemd-fsck-root.service,systemd
-systemd-fsck@.service,systemd
-systemd-halt.service,systemd
-systemd-hibernate-resume@.service,systemd
-systemd-hibernate.service,systemd
-systemd-hwdb-update.service,systemd
-systemd-hybrid-sleep.service,systemd
-systemd-initctl.service,systemd
-systemd-journal-catalog-update.service,systemd
-systemd-journal-flush.service,systemd
-systemd-localed.service,systemd
-systemd-machine-id-commit.service,systemd
-systemd-modules-load.service,systemd
-systemd-poweroff.service,systemd
-systemd-quotacheck.service,systemd
-systemd-reboot.service,systemd
-systemd-remount-fs.service,systemd
-systemd-suspend.service,systemd
-systemd-sysctl.service,systemd
-systemd-tmpfiles-setup-dev.service,systemd
-systemd-tmpfiles-setup.service,systemd
-systemd-udev-settle.service,systemd
-systemd-udev-trigger.service,systemd
-systemd-update-done.service,systemd
-systemd-update-utmp-runlevel.service,systemd
-systemd-update-utmp.service,systemd
-systemd-user-sessions.service,systemd
-systemd-vconsole-setup.service,systemd
-tizen-fstrim-user.service,systemd
-tizen-system-env.service,systemd
-tizenid.service,systemd
-ttrace-marker.service,systemd
-udev-sdb-init.service,systemd
-webappenc-initializer.service,systemd
-factory-reset-launch.service,dbus
-org.freedesktop.systemd1.service,dbus
-org.tizen.system.popup.service,dbus
-org.tizen.factory-reset.service,dbus
-org.tizen.system.crash.service,dbus
-org.tizen.dpm.syspopup.service,dbus
+++ /dev/null
-bluetooth-hci-device.service,systemd
-bluetooth-hciattach@.service,systemd
-bluetooth-address.service,systemd
-bluetooth-hci-logger.service,systemd
-bluetooth-force-hci-logger.service,systemd
-bluetooth-hci-dump@.service,systemd
-boot-animation.service,systemd
-console-getty.service,systemd
-console-shell.service,systemd
-container-getty@.service,systemd
-debug-shell.service,systemd
-device-policy-syspopup.service,systemd
-emergency.service,systemd
-factory-reset.service,systemd
-getty@.service,systemd
-init-update.service,systemd
-initrd-cleanup.service,systemd
-initrd-parse-etc.service,systemd
-initrd-switch-root.service,systemd
-initrd-udevadm-cleanup-db.service,systemd
-kmod-static-nodes.service,systemd
-lazy_mount.service,systemd
-ldconfig.service,systemd
-log_dump.service,systemd
-offline-update.service,systemd
-org.tizen.dummyasm.service,systemd
-pkg-db-recovery.service,systemd
-pkgdir-tool.service,systemd
-quotaon.service,systemd
-rescue.service,systemd
-resize2fs@.service,systemd
-security-config.service,systemd
-security-manager-rules-loader.service,systemd
-security-manager-cleanup.service,systemd
-shutdown-animation.service,systemd
-sys-kernel-tracing.service,systemd
-system-popup.service,systemd
-systemd-binfmt.service,systemd
-systemd-exit.service,systemd
-systemd-fsck-root.service,systemd
-systemd-fsck@.service,systemd
-systemd-halt.service,systemd
-systemd-hibernate-resume@.service,systemd
-systemd-hibernate.service,systemd
-systemd-hwdb-update.service,systemd
-systemd-hybrid-sleep.service,systemd
-systemd-initctl.service,systemd
-systemd-journal-catalog-update.service,systemd
-systemd-journal-flush.service,systemd
-systemd-localed.service,systemd
-systemd-machine-id-commit.service,systemd
-systemd-modules-load.service,systemd
-systemd-poweroff.service,systemd
-systemd-quotacheck.service,systemd
-systemd-reboot.service,systemd
-systemd-remount-fs.service,systemd
-systemd-suspend.service,systemd
-systemd-sysctl.service,systemd
-systemd-tmpfiles-setup-dev.service,systemd
-systemd-tmpfiles-setup.service,systemd
-systemd-udev-settle.service,systemd
-systemd-udev-trigger.service,systemd
-systemd-update-done.service,systemd
-systemd-update-utmp-runlevel.service,systemd
-systemd-update-utmp.service,systemd
-systemd-user-sessions.service,systemd
-systemd-vconsole-setup.service,systemd
-tizen-fstrim-user.service,systemd
-tizen-system-env.service,systemd
-tizenid.service,systemd
-ttrace-marker.service,systemd
-udev-sdb-init.service,systemd
-webappenc-initializer.service,systemd
-factory-reset-launch.service,dbus
-org.freedesktop.systemd1.service,dbus
-org.tizen.system.popup.service,dbus
-org.tizen.factory-reset.service,dbus
-org.tizen.system.crash.service,dbus
-org.tizen.dpm.syspopup.service,dbus
+++ /dev/null
-ac.service,systemd,app_fw,app_fw
-accounts-service.service,systemd,service_fw,service_fw
-alarm-manager,systemd,app_fw,app_fw
-auth-fw.service,systemd,security_fw,security_fw
-bluetooth-frwk.service,systemd,network_fw,network_fw
-bluetooth-share.service,systemd,network_fw,network_fw
-bluetooth-map-agent.service,systemd,network_fw,network_fw
-bluetooth-pbap-agent.service,systemd,network_fw,network_fw
-browser-provider.service,systemd,web_fw,web_fw
-buxton2.service,systemd,buxton,buxton
-callmgr.service,systemd,telephony,telephony
-central-key-manager.service,systemd,key-manager,key-manager
-cert-checker.service,systemd,security_fw,security_fw
-cert-server.service,systemd,security_fw,security_fw
-connman.service,systemd,network_fw,network_fw
-connman_tv.service,systemd,network_fw,network_fw
-connman-vpn.service,systemd,network_fw,network_fw
-contextd.service,systemd,service_fw,service_fw
-csr.service,systemd,security_fw,security_fw
-cynara.service,systemd,cynara,cynara
-data-provider-master.service,systemd,app_fw,app_fw
-dbus.service,systemd,dbus,dbus
-device-policy-manager.service,systemd,security_fw,security_fw
-download-provider.service,systemd,web_fw,web_fw
-esd.service,systemd,app_fw,app_fw
-feedbackd.service,systemd,system_fw,system_fw
-fido-asm.service,systemd,service_fw,service_fw
-fido-bt-roaming-agent.service,systemd,service_fw,service_fw
-lbs-server.service,systemd,location,location
-license-manager-agent.service,systemd,security_fw,security_fw
-media-server.service,systemd,multimedia_fw,multimedia_fw
-media-controller.service,systemd,multimedia_fw,multimedia_fw
-mobileap-agent.service,systemd,network_fw,network_fw
-msg-server.service,systemd,messaging,messaging
-mtp-responder.service,systemd,network_fw,network_fw
-mtp-initiator.service,systemd,network_fw,network_fw
-muse-server.service,systemd,multimedia_fw,multimedia_fw
-murphyd.service,systemd,multimedia_fw,multimedia_fw
-nether.service,systemd,security_fw,security_fw
-net-config.service,systemd,network_fw,network_fw
-net-config_tv.service,systemd,network_fw,network_fw
-nfc-manager.service,systemd,network_fw,network_fw
-ode.service,systemd,security_fw,security_fw
-package-manager.service,systemd,app_fw,app_fw
-package-recovery.service,systemd,app_fw,app_fw
-pass.service,systemd,system_fw,system_fw
-phonenumber-utils.service,systemd,service_fw,service_fw
-privacy-guard-server.service,systemd,security_fw,security_fw
-pushd.service,systemd,service_fw,service_fw
-sensord.service,systemd,sensor,sensor
-stc-manager.service,systemd,network_fw,network_fw
-telephony-daemon.service,systemd,telephony,telephony
-wifi-direct-manager.service,systemd,network_fw,network_fw
-wmeshd.service,systemd,network_fw,network_fw
-zigbee-daemon.service,systemd,network_fw,network_fw
-net.asp.service,dbus,network_fw,network_fw
-net.connman.service,dbus,network_fw,network_fw
-net.connman.vpn.service,dbus,network_fw,network_fw
-net.netconfig.service,dbus,network_fw,network_fw
-net.wifidirect.service,dbus,network_fw,network_fw
-net.wmesh.service,dbus,network_fw,network_fw
-org.bluez.obex.service,dbus,network_fw,network_fw
-org.bluez.map_agent.service,dbus,network_fw,network_fw
-org.bluez.pb_agent.service,dbus,network_fw,network_fw
-org.bluez.ag_agent.service,dbus,network_fw,network_fw
-org.projectx.bt.service,dbus,network_fw,network_fw
-org.tizen.account.manager.service,dbus,service_fw,service_fw
-org.tizen.alarm.manager.service,dbus,app_fw,app_fw
-org.tizen.data-provider-master.service,dbus,app_fw,app_fw
-org.tizen.fido-asm.service,dbus,service_fw,service_fw
-org.tizen.fido-bt-roaming.service,dbus,service_fw,service_fw
-org.tizen.lbs.Providers.LbsServer.service,dbus,location,location
-org.tizen.MobileapAgent.service,dbus,network_fw,network_fw
-org.tizen.NetNfcService.service,dbus,network_fw,network_fw
-org.tizen.PhonenumberUtils.dbus.service,dbus,service_fw,service_fw
-org.tizen.pkgmgr.service,dbus,app_fw,app_fw
-org.tizen.pkg_recovery.service,dbus,app_fw,app_fw
-org.tizen.scmirroring.server.service,dbus,multimedia_fw,multimedia_fw
-org.tizen.SmartcardService.service,dbus,network_fw,network_fw
-org.tizen.smartreply.service,dbus,ui_fw,ui_fw
-org.tizen.zigbee.service,dbus,network_fw,network_fw
\ No newline at end of file
+++ /dev/null
-ac.service,systemd,app_fw,app_fw
-accounts-service.service,systemd,service_fw,service_fw
-alarm-manager,systemd,app_fw,app_fw
-auth-fw.service,systemd,security_fw,security_fw
-bluetooth-frwk.service,systemd,network_fw,network_fw
-bluetooth-share.service,systemd,network_fw,network_fw
-bluetooth-map-agent.service,systemd,network_fw,network_fw
-bluetooth-pbap-agent.service,systemd,network_fw,network_fw
-browser-provider.service,systemd,web_fw,web_fw
-buxton2.service,systemd,buxton,buxton
-callmgr.service,systemd,telephony,telephony
-central-key-manager.service,systemd,key-manager,key-manager
-cert-checker.service,systemd,security_fw,security_fw
-cert-server.service,systemd,security_fw,security_fw
-connman.service,systemd,network_fw,network_fw
-connman_tv.service,systemd,network_fw,network_fw
-connman-vpn.service,systemd,network_fw,network_fw
-contextd.service,systemd,service_fw,service_fw
-csr.service,systemd,security_fw,security_fw
-cynara.service,systemd,cynara,cynara
-data-provider-master.service,systemd,app_fw,app_fw
-dbus.service,systemd,dbus,dbus
-device-policy-manager.service,systemd,security_fw,security_fw
-download-provider.service,systemd,web_fw,web_fw
-esd.service,systemd,app_fw,app_fw
-feedbackd.service,systemd,system_fw,system_fw
-fido-asm.service,systemd,service_fw,service_fw
-fido-bt-roaming-agent.service,systemd,service_fw,service_fw
-lbs-server.service,systemd,location,location
-license-manager-agent.service,systemd,security_fw,security_fw
-media-server.service,systemd,multimedia_fw,multimedia_fw
-media-controller.service,systemd,multimedia_fw,multimedia_fw
-mobileap-agent.service,systemd,network_fw,network_fw
-msg-server.service,systemd,messaging,messaging
-mtp-responder.service,systemd,network_fw,network_fw
-mtp-initiator.service,systemd,network_fw,network_fw
-muse-server.service,systemd,multimedia_fw,multimedia_fw
-murphyd.service,systemd,multimedia_fw,multimedia_fw
-nether.service,systemd,security_fw,security_fw
-net-config.service,systemd,network_fw,network_fw
-net-config_tv.service,systemd,network_fw,network_fw
-nfc-manager.service,systemd,network_fw,network_fw
-ode.service,systemd,security_fw,security_fw
-package-manager.service,systemd,app_fw,app_fw
-package-recovery.service,systemd,app_fw,app_fw
-pass.service,systemd,system_fw,system_fw
-phonenumber-utils.service,systemd,service_fw,service_fw
-privacy-guard-server.service,systemd,security_fw,security_fw
-pulseaudio.service,systemd,pulse,pulse
-pushd.service,systemd,service_fw,service_fw
-sensord.service,systemd,sensor,sensor
-stc-manager.service,systemd,network_fw,network_fw
-telephony-daemon.service,systemd,telephony,telephony
-wifi-direct-manager.service,systemd,network_fw,network_fw
-wmeshd.service,systemd,network_fw,network_fw
-zigbee-daemon.service,systemd,network_fw,network_fw
-net.asp.service,dbus,network_fw,network_fw
-net.connman.service,dbus,network_fw,network_fw
-net.connman.vpn.service,dbus,network_fw,network_fw
-net.netconfig.service,dbus,network_fw,network_fw
-net.wifidirect.service,dbus,network_fw,network_fw
-net.wmesh.service,dbus,network_fw,network_fw
-org.bluez.obex.service,dbus,network_fw,network_fw
-org.bluez.map_agent.service,dbus,network_fw,network_fw
-org.bluez.pb_agent.service,dbus,network_fw,network_fw
-org.bluez.ag_agent.service,dbus,network_fw,network_fw
-org.projectx.bt.service,dbus,network_fw,network_fw
-org.tizen.account.manager.service,dbus,service_fw,service_fw
-org.tizen.alarm.manager.service,dbus,app_fw,app_fw
-org.tizen.data-provider-master.service,dbus,app_fw,app_fw
-org.tizen.fido-asm.service,dbus,service_fw,service_fw
-org.tizen.fido-bt-roaming.service,dbus,service_fw,service_fw
-org.tizen.lbs.Providers.LbsServer.service,dbus,location,location
-org.tizen.MobileapAgent.service,dbus,network_fw,network_fw
-org.tizen.NetNfcService.service,dbus,network_fw,network_fw
-org.tizen.PhonenumberUtils.dbus.service,dbus,service_fw,service_fw
-org.tizen.pkgmgr.service,dbus,app_fw,app_fw
-org.tizen.pkg_recovery.service,dbus,app_fw,app_fw
-org.tizen.scmirroring.server.service,dbus,multimedia_fw,multimedia_fw
-org.tizen.SmartcardService.service,dbus,network_fw,network_fw
-org.tizen.smartreply.service,dbus,ui_fw,ui_fw
-org.tizen.zigbee.service,dbus,network_fw,network_fw
\ No newline at end of file
+++ /dev/null
-app2sd-server.service,systemd
-deviced.service,systemd
-dlog_logger.service,systemd
-display-manager.service,systemd
-faultd.service,systemd
-gumd.service,systemd
-krate.service,systemd
-resourced.service,systemd
-security-manager.service,systemd
-storaged.service,systemd
-systemd-ask-password-console.service,systemd
-systemd-ask-password-wall.service,systemd
-systemd-journald.service,systemd
-systemd-kexec.service,systemd
-systemd-logind.service,systemd
-systemd-nspawn@.service,systemd
-systemd-udevd.service,systemd
-tlm.service,systemd
-emuld.service,systemd
-vmodem-x86.service,systemd
-usb-host-ffs-test-daemon.service,systemd
-org.tizen.app2sd.service,dbus
-org.projectx.bt_core.service,dbus
+++ /dev/null
-app2sd-server.service,systemd
-deviced.service,systemd
-dlog_logger.service,systemd
-display-manager.service,systemd
-faultd.service,systemd
-gumd.service,systemd
-krate.service,systemd
-resourced.service,systemd
-security-manager.service,systemd
-storaged.service,systemd
-systemd-ask-password-console.service,systemd
-systemd-ask-password-wall.service,systemd
-systemd-journald.service,systemd
-systemd-kexec.service,systemd
-systemd-logind.service,systemd
-systemd-nspawn@.service,systemd
-systemd-udevd.service,systemd
-tlm.service,systemd
-emuld.service,systemd
-vmodem-x86.service,systemd
-usb-host-ffs-test-daemon.service,systemd
-org.tizen.app2sd.service,dbus
-org.projectx.bt_core.service,dbus
+++ /dev/null
-pulseaudio.service,systemd,ID_DEFINED_IN_CODE,pulse,pulse
\ No newline at end of file
+++ /dev/null
-pulseaudio.service,systemd,ID_DEFINED_IN_CODE,pulse,pulse
\ No newline at end of file
+++ /dev/null
-bluetooth-hci-device.service,systemd
-bluetooth-hciattach@.service,systemd
-bluetooth-address.service,systemd
-bluetooth-hci-logger.service,systemd
-bluetooth-force-hci-logger.service,systemd
-bluetooth-hci-dump@.service,systemd
-boot-animation.service,systemd
-console-getty.service,systemd
-console-shell.service,systemd
-container-getty@.service,systemd
-debug-shell.service,systemd
-device-policy-syspopup.service,systemd
-emergency.service,systemd
-factory-reset.service,systemd
-getty@.service,systemd
-init-update.service,systemd
-initrd-cleanup.service,systemd
-initrd-parse-etc.service,systemd
-initrd-switch-root.service,systemd
-initrd-udevadm-cleanup-db.service,systemd
-kmod-static-nodes.service,systemd
-lazy_mount.service,systemd
-ldconfig.service,systemd
-log_dump.service,systemd
-offline-update.service,systemd
-org.tizen.dummyasm.service,systemd
-pkg-db-recovery.service,systemd
-pkgdir-tool.service,systemd
-quotaon.service,systemd
-rescue.service,systemd
-resize2fs@.service,systemd
-security-config.service,systemd
-security-manager-rules-loader.service,systemd
-security-manager-cleanup.service,systemd
-shutdown-animation.service,systemd
-sys-kernel-tracing.service,systemd
-system-popup.service,systemd
-systemd-binfmt.service,systemd
-systemd-exit.service,systemd
-systemd-fsck-root.service,systemd
-systemd-fsck@.service,systemd
-systemd-halt.service,systemd
-systemd-hibernate-resume@.service,systemd
-systemd-hibernate.service,systemd
-systemd-hwdb-update.service,systemd
-systemd-hybrid-sleep.service,systemd
-systemd-initctl.service,systemd
-systemd-journal-catalog-update.service,systemd
-systemd-journal-flush.service,systemd
-systemd-localed.service,systemd
-systemd-machine-id-commit.service,systemd
-systemd-modules-load.service,systemd
-systemd-poweroff.service,systemd
-systemd-quotacheck.service,systemd
-systemd-reboot.service,systemd
-systemd-remount-fs.service,systemd
-systemd-suspend.service,systemd
-systemd-sysctl.service,systemd
-systemd-tmpfiles-setup-dev.service,systemd
-systemd-tmpfiles-setup.service,systemd
-systemd-udev-settle.service,systemd
-systemd-udev-trigger.service,systemd
-systemd-update-done.service,systemd
-systemd-update-utmp-runlevel.service,systemd
-systemd-update-utmp.service,systemd
-systemd-user-sessions.service,systemd
-systemd-vconsole-setup.service,systemd
-tizen-fstrim-user.service,systemd
-tizen-system-env.service,systemd
-tizenid.service,systemd
-ttrace-marker.service,systemd
-udev-sdb-init.service,systemd
-webappenc-initializer.service,systemd
-factory-reset-launch.service,dbus
-org.freedesktop.systemd1.service,dbus
-org.tizen.system.popup.service,dbus
-org.tizen.factory-reset.service,dbus
-org.tizen.system.crash.service,dbus
-org.tizen.dpm.syspopup.service,dbus
+++ /dev/null
-bluetooth-hci-device.service,systemd
-bluetooth-hciattach@.service,systemd
-bluetooth-address.service,systemd
-bluetooth-hci-logger.service,systemd
-bluetooth-force-hci-logger.service,systemd
-bluetooth-hci-dump@.service,systemd
-boot-animation.service,systemd
-console-getty.service,systemd
-console-shell.service,systemd
-container-getty@.service,systemd
-debug-shell.service,systemd
-device-policy-syspopup.service,systemd
-emergency.service,systemd
-factory-reset.service,systemd
-getty@.service,systemd
-init-update.service,systemd
-initrd-cleanup.service,systemd
-initrd-parse-etc.service,systemd
-initrd-switch-root.service,systemd
-initrd-udevadm-cleanup-db.service,systemd
-kmod-static-nodes.service,systemd
-lazy_mount.service,systemd
-ldconfig.service,systemd
-log_dump.service,systemd
-offline-update.service,systemd
-org.tizen.dummyasm.service,systemd
-pkg-db-recovery.service,systemd
-pkgdir-tool.service,systemd
-quotaon.service,systemd
-rescue.service,systemd
-resize2fs@.service,systemd
-security-config.service,systemd
-security-manager-rules-loader.service,systemd
-security-manager-cleanup.service,systemd
-shutdown-animation.service,systemd
-sys-kernel-tracing.service,systemd
-system-popup.service,systemd
-systemd-binfmt.service,systemd
-systemd-exit.service,systemd
-systemd-fsck-root.service,systemd
-systemd-fsck@.service,systemd
-systemd-halt.service,systemd
-systemd-hibernate-resume@.service,systemd
-systemd-hibernate.service,systemd
-systemd-hwdb-update.service,systemd
-systemd-hybrid-sleep.service,systemd
-systemd-initctl.service,systemd
-systemd-journal-catalog-update.service,systemd
-systemd-journal-flush.service,systemd
-systemd-localed.service,systemd
-systemd-machine-id-commit.service,systemd
-systemd-modules-load.service,systemd
-systemd-poweroff.service,systemd
-systemd-quotacheck.service,systemd
-systemd-reboot.service,systemd
-systemd-remount-fs.service,systemd
-systemd-suspend.service,systemd
-systemd-sysctl.service,systemd
-systemd-tmpfiles-setup-dev.service,systemd
-systemd-tmpfiles-setup.service,systemd
-systemd-udev-settle.service,systemd
-systemd-udev-trigger.service,systemd
-systemd-update-done.service,systemd
-systemd-update-utmp-runlevel.service,systemd
-systemd-update-utmp.service,systemd
-systemd-user-sessions.service,systemd
-systemd-vconsole-setup.service,systemd
-tizen-fstrim-user.service,systemd
-tizen-system-env.service,systemd
-tizenid.service,systemd
-ttrace-marker.service,systemd
-udev-sdb-init.service,systemd
-webappenc-initializer.service,systemd
-factory-reset-launch.service,dbus
-org.freedesktop.systemd1.service,dbus
-org.tizen.system.popup.service,dbus
-org.tizen.factory-reset.service,dbus
-org.tizen.system.crash.service,dbus
-org.tizen.dpm.syspopup.service,dbus
+++ /dev/null
-ac.service,systemd,app_fw,app_fw
-accounts-service.service,systemd,service_fw,service_fw
-alarm-manager,systemd,app_fw,app_fw
-auth-fw.service,systemd,security_fw,security_fw
-bluetooth-frwk.service,systemd,network_fw,network_fw
-bluetooth-share.service,systemd,network_fw,network_fw
-bluetooth-map-agent.service,systemd,network_fw,network_fw
-bluetooth-pbap-agent.service,systemd,network_fw,network_fw
-browser-provider.service,systemd,web_fw,web_fw
-buxton2.service,systemd,buxton,buxton
-callmgr.service,systemd,telephony,telephony
-central-key-manager.service,systemd,key-manager,key-manager
-cert-checker.service,systemd,security_fw,security_fw
-cert-server.service,systemd,security_fw,security_fw
-connman.service,systemd,network_fw,network_fw
-connman_tv.service,systemd,network_fw,network_fw
-connman-vpn.service,systemd,network_fw,network_fw
-contextd.service,systemd,service_fw,service_fw
-csr.service,systemd,security_fw,security_fw
-cynara.service,systemd,cynara,cynara
-data-provider-master.service,systemd,app_fw,app_fw
-dbus.service,systemd,dbus,dbus
-device-policy-manager.service,systemd,security_fw,security_fw
-download-provider.service,systemd,web_fw,web_fw
-esd.service,systemd,app_fw,app_fw
-feedbackd.service,systemd,system_fw,system_fw
-fido-asm.service,systemd,service_fw,service_fw
-fido-bt-roaming-agent.service,systemd,service_fw,service_fw
-lbs-server.service,systemd,location,location
-license-manager-agent.service,systemd,security_fw,security_fw
-media-server.service,systemd,multimedia_fw,multimedia_fw
-media-controller.service,systemd,multimedia_fw,multimedia_fw
-mobileap-agent.service,systemd,network_fw,network_fw
-msg-server.service,systemd,messaging,messaging
-mtp-responder.service,systemd,network_fw,network_fw
-mtp-initiator.service,systemd,network_fw,network_fw
-muse-server.service,systemd,multimedia_fw,multimedia_fw
-murphyd.service,systemd,multimedia_fw,multimedia_fw
-nether.service,systemd,security_fw,security_fw
-net-config.service,systemd,network_fw,network_fw
-net-config_tv.service,systemd,network_fw,network_fw
-nfc-manager.service,systemd,network_fw,network_fw
-ode.service,systemd,security_fw,security_fw
-package-manager.service,systemd,app_fw,app_fw
-package-recovery.service,systemd,app_fw,app_fw
-pass.service,systemd,system_fw,system_fw
-phonenumber-utils.service,systemd,service_fw,service_fw
-privacy-guard-server.service,systemd,security_fw,security_fw
-pushd.service,systemd,service_fw,service_fw
-sensord.service,systemd,sensor,sensor
-stc-manager.service,systemd,network_fw,network_fw
-telephony-daemon.service,systemd,telephony,telephony
-wifi-direct-manager.service,systemd,network_fw,network_fw
-wmeshd.service,systemd,network_fw,network_fw
-zigbee-daemon.service,systemd,network_fw,network_fw
-net.asp.service,dbus,network_fw,network_fw
-net.connman.service,dbus,network_fw,network_fw
-net.connman.vpn.service,dbus,network_fw,network_fw
-net.netconfig.service,dbus,network_fw,network_fw
-net.wifidirect.service,dbus,network_fw,network_fw
-net.wmesh.service,dbus,network_fw,network_fw
-org.bluez.obex.service,dbus,network_fw,network_fw
-org.bluez.map_agent.service,dbus,network_fw,network_fw
-org.bluez.pb_agent.service,dbus,network_fw,network_fw
-org.bluez.ag_agent.service,dbus,network_fw,network_fw
-org.projectx.bt.service,dbus,network_fw,network_fw
-org.tizen.account.manager.service,dbus,service_fw,service_fw
-org.tizen.alarm.manager.service,dbus,app_fw,app_fw
-org.tizen.data-provider-master.service,dbus,app_fw,app_fw
-org.tizen.fido-asm.service,dbus,service_fw,service_fw
-org.tizen.fido-bt-roaming.service,dbus,service_fw,service_fw
-org.tizen.lbs.Providers.LbsServer.service,dbus,location,location
-org.tizen.MobileapAgent.service,dbus,network_fw,network_fw
-org.tizen.NetNfcService.service,dbus,network_fw,network_fw
-org.tizen.PhonenumberUtils.dbus.service,dbus,service_fw,service_fw
-org.tizen.pkgmgr.service,dbus,app_fw,app_fw
-org.tizen.pkg_recovery.service,dbus,app_fw,app_fw
-org.tizen.scmirroring.server.service,dbus,multimedia_fw,multimedia_fw
-org.tizen.SmartcardService.service,dbus,network_fw,network_fw
-org.tizen.smartreply.service,dbus,ui_fw,ui_fw
-org.tizen.zigbee.service,dbus,network_fw,network_fw
\ No newline at end of file
+++ /dev/null
-ac.service,systemd,app_fw,app_fw
-accounts-service.service,systemd,service_fw,service_fw
-alarm-manager,systemd,app_fw,app_fw
-auth-fw.service,systemd,security_fw,security_fw
-bluetooth-frwk.service,systemd,network_fw,network_fw
-bluetooth-share.service,systemd,network_fw,network_fw
-bluetooth-map-agent.service,systemd,network_fw,network_fw
-bluetooth-pbap-agent.service,systemd,network_fw,network_fw
-browser-provider.service,systemd,web_fw,web_fw
-buxton2.service,systemd,buxton,buxton
-callmgr.service,systemd,telephony,telephony
-central-key-manager.service,systemd,key-manager,key-manager
-cert-checker.service,systemd,security_fw,security_fw
-cert-server.service,systemd,security_fw,security_fw
-connman.service,systemd,network_fw,network_fw
-connman_tv.service,systemd,network_fw,network_fw
-connman-vpn.service,systemd,network_fw,network_fw
-contextd.service,systemd,service_fw,service_fw
-csr.service,systemd,security_fw,security_fw
-cynara.service,systemd,cynara,cynara
-data-provider-master.service,systemd,app_fw,app_fw
-dbus.service,systemd,dbus,dbus
-device-policy-manager.service,systemd,security_fw,security_fw
-download-provider.service,systemd,web_fw,web_fw
-esd.service,systemd,app_fw,app_fw
-feedbackd.service,systemd,system_fw,system_fw
-fido-asm.service,systemd,service_fw,service_fw
-fido-bt-roaming-agent.service,systemd,service_fw,service_fw
-lbs-server.service,systemd,location,location
-license-manager-agent.service,systemd,security_fw,security_fw
-media-server.service,systemd,multimedia_fw,multimedia_fw
-media-controller.service,systemd,multimedia_fw,multimedia_fw
-mobileap-agent.service,systemd,network_fw,network_fw
-msg-server.service,systemd,messaging,messaging
-mtp-responder.service,systemd,network_fw,network_fw
-mtp-initiator.service,systemd,network_fw,network_fw
-muse-server.service,systemd,multimedia_fw,multimedia_fw
-murphyd.service,systemd,multimedia_fw,multimedia_fw
-nether.service,systemd,security_fw,security_fw
-net-config.service,systemd,network_fw,network_fw
-net-config_tv.service,systemd,network_fw,network_fw
-nfc-manager.service,systemd,network_fw,network_fw
-ode.service,systemd,security_fw,security_fw
-package-manager.service,systemd,app_fw,app_fw
-package-recovery.service,systemd,app_fw,app_fw
-pass.service,systemd,system_fw,system_fw
-phonenumber-utils.service,systemd,service_fw,service_fw
-privacy-guard-server.service,systemd,security_fw,security_fw
-pushd.service,systemd,service_fw,service_fw
-sensord.service,systemd,sensor,sensor
-stc-manager.service,systemd,network_fw,network_fw
-telephony-daemon.service,systemd,telephony,telephony
-wifi-direct-manager.service,systemd,network_fw,network_fw
-wmeshd.service,systemd,network_fw,network_fw
-zigbee-daemon.service,systemd,network_fw,network_fw
-net.asp.service,dbus,network_fw,network_fw
-net.connman.service,dbus,network_fw,network_fw
-net.connman.vpn.service,dbus,network_fw,network_fw
-net.netconfig.service,dbus,network_fw,network_fw
-net.wifidirect.service,dbus,network_fw,network_fw
-net.wmesh.service,dbus,network_fw,network_fw
-org.bluez.obex.service,dbus,network_fw,network_fw
-org.bluez.map_agent.service,dbus,network_fw,network_fw
-org.bluez.pb_agent.service,dbus,network_fw,network_fw
-org.bluez.ag_agent.service,dbus,network_fw,network_fw
-org.projectx.bt.service,dbus,network_fw,network_fw
-org.tizen.account.manager.service,dbus,service_fw,service_fw
-org.tizen.alarm.manager.service,dbus,app_fw,app_fw
-org.tizen.data-provider-master.service,dbus,app_fw,app_fw
-org.tizen.fido-asm.service,dbus,service_fw,service_fw
-org.tizen.fido-bt-roaming.service,dbus,service_fw,service_fw
-org.tizen.lbs.Providers.LbsServer.service,dbus,location,location
-org.tizen.MobileapAgent.service,dbus,network_fw,network_fw
-org.tizen.NetNfcService.service,dbus,network_fw,network_fw
-org.tizen.PhonenumberUtils.dbus.service,dbus,service_fw,service_fw
-org.tizen.pkgmgr.service,dbus,app_fw,app_fw
-org.tizen.pkg_recovery.service,dbus,app_fw,app_fw
-org.tizen.scmirroring.server.service,dbus,multimedia_fw,multimedia_fw
-org.tizen.SmartcardService.service,dbus,network_fw,network_fw
-org.tizen.smartreply.service,dbus,ui_fw,ui_fw
-org.tizen.zigbee.service,dbus,network_fw,network_fw
\ No newline at end of file
+++ /dev/null
-app2sd-server.service,systemd
-deviced.service,systemd
-dlog_logger.service,systemd
-display-manager.service,systemd
-faultd.service,systemd
-gumd.service,systemd
-krate.service,systemd
-resourced.service,systemd
-security-manager.service,systemd
-storaged.service,systemd
-systemd-ask-password-console.service,systemd
-systemd-ask-password-wall.service,systemd
-systemd-journald.service,systemd
-systemd-kexec.service,systemd
-systemd-logind.service,systemd
-systemd-nspawn@.service,systemd
-systemd-udevd.service,systemd
-tlm.service,systemd
-emuld.service,systemd
-vmodem-x86.service,systemd
-usb-host-ffs-test-daemon.service,systemd
-org.tizen.app2sd.service,dbus
-org.projectx.bt_core.service,dbus
+++ /dev/null
-app2sd-server.service,systemd
-deviced.service,systemd
-dlog_logger.service,systemd
-display-manager.service,systemd
-faultd.service,systemd
-gumd.service,systemd
-krate.service,systemd
-resourced.service,systemd
-security-manager.service,systemd
-storaged.service,systemd
-systemd-ask-password-console.service,systemd
-systemd-ask-password-wall.service,systemd
-systemd-journald.service,systemd
-systemd-kexec.service,systemd
-systemd-logind.service,systemd
-systemd-nspawn@.service,systemd
-systemd-udevd.service,systemd
-tlm.service,systemd
-emuld.service,systemd
-vmodem-x86.service,systemd
-usb-host-ffs-test-daemon.service,systemd
-org.tizen.app2sd.service,dbus
-org.projectx.bt_core.service,dbus
+++ /dev/null
-pulseaudio.service,systemd,ID_DEFINED_IN_CODE,pulse,pulse
-autovt@.service,systemd,NEED_TO_CHECK
-dbus-org.freedesktop.locale1.service,systemd,NEED_TO_CHECK
-dbus-org.freedesktop.login1.service,systemd,NEED_TO_CHECK
-sdbd_tcp.service,systemd,NEED_TO_CHECK
-serial-getty@.service,systemd,NEED_TO_CHECK
-systemd-tmpfiles-clean.service,systemd,NEED_TO_CHECK
-tizen-debug-off.service,systemd,NEED_TO_CHECK
-tizen-debug-on.service,systemd,NEED_TO_CHECK
-org.freedesktop.locale1.service,dbus,NEED_TO_CHECK
-org.freedesktop.login1.service,dbus,NEED_TO_CHECK
-org.tizen.fido.service,dbus,NEED_TO_CHECK
-org.O1.SecurityAccounts.gUserManagement.service,dbus,NEED_TO_CHECK
+++ /dev/null
-pulseaudio.service,systemd,ID_DEFINED_IN_CODE,pulse,pulse
-autovt@.service,systemd,NEED_TO_CHECK
-dbus-org.freedesktop.locale1.service,systemd,NEED_TO_CHECK
-dbus-org.freedesktop.login1.service,systemd,NEED_TO_CHECK
-sdbd_tcp.service,systemd,NEED_TO_CHECK
-serial-getty@.service,systemd,NEED_TO_CHECK
-systemd-tmpfiles-clean.service,systemd,NEED_TO_CHECK
-tizen-debug-off.service,systemd,NEED_TO_CHECK
-tizen-debug-on.service,systemd,NEED_TO_CHECK
-org.freedesktop.locale1.service,dbus,NEED_TO_CHECK
-org.freedesktop.login1.service,dbus,NEED_TO_CHECK
-org.tizen.fido.service,dbus,NEED_TO_CHECK
-org.O1.SecurityAccounts.gUserManagement.service,dbus,NEED_TO_CHECK
+++ /dev/null
-bluetooth-hci-device.service,systemd
-bluetooth-hciattach@.service,systemd
-bluetooth-address.service,systemd
-bluetooth-hci-logger.service,systemd
-bluetooth-force-hci-logger.service,systemd
-bluetooth-hci-dump@.service,systemd
-boot-animation.service,systemd
-console-getty.service,systemd
-console-shell.service,systemd
-container-getty@.service,systemd
-debug-shell.service,systemd
-device-policy-syspopup.service,systemd
-emergency.service,systemd
-factory-reset.service,systemd
-getty@.service,systemd
-init-update.service,systemd
-initrd-cleanup.service,systemd
-initrd-parse-etc.service,systemd
-initrd-switch-root.service,systemd
-initrd-udevadm-cleanup-db.service,systemd
-kmod-static-nodes.service,systemd
-lazy_mount.service,systemd
-ldconfig.service,systemd
-log_dump.service,systemd
-offline-update.service,systemd
-org.tizen.dummyasm.service,systemd
-pkg-db-recovery.service,systemd
-pkgdir-tool.service,systemd
-quotaon.service,systemd
-rescue.service,systemd
-resize2fs@.service,systemd
-security-config.service,systemd
-security-manager-rules-loader.service,systemd
-security-manager-cleanup.service,systemd
-shutdown-animation.service,systemd
-sys-kernel-tracing.service,systemd
-system-popup.service,systemd
-systemd-binfmt.service,systemd
-systemd-exit.service,systemd
-systemd-fsck-root.service,systemd
-systemd-fsck@.service,systemd
-systemd-halt.service,systemd
-systemd-hibernate-resume@.service,systemd
-systemd-hibernate.service,systemd
-systemd-hwdb-update.service,systemd
-systemd-hybrid-sleep.service,systemd
-systemd-initctl.service,systemd
-systemd-journal-catalog-update.service,systemd
-systemd-journal-flush.service,systemd
-systemd-localed.service,systemd
-systemd-machine-id-commit.service,systemd
-systemd-modules-load.service,systemd
-systemd-poweroff.service,systemd
-systemd-quotacheck.service,systemd
-systemd-reboot.service,systemd
-systemd-remount-fs.service,systemd
-systemd-suspend.service,systemd
-systemd-sysctl.service,systemd
-systemd-tmpfiles-setup-dev.service,systemd
-systemd-tmpfiles-setup.service,systemd
-systemd-udev-settle.service,systemd
-systemd-udev-trigger.service,systemd
-systemd-update-done.service,systemd
-systemd-update-utmp-runlevel.service,systemd
-systemd-update-utmp.service,systemd
-systemd-user-sessions.service,systemd
-systemd-vconsole-setup.service,systemd
-tizen-fstrim-user.service,systemd
-tizen-system-env.service,systemd
-tizenid.service,systemd
-ttrace-marker.service,systemd
-udev-sdb-init.service,systemd
-webappenc-initializer.service,systemd
-factory-reset-launch.service,dbus
-org.freedesktop.systemd1.service,dbus
-org.tizen.system.popup.service,dbus
-org.tizen.factory-reset.service,dbus
-org.tizen.system.crash.service,dbus
-org.tizen.dpm.syspopup.service,dbus
+++ /dev/null
-bluetooth-hci-device.service,systemd
-bluetooth-hciattach@.service,systemd
-bluetooth-address.service,systemd
-bluetooth-hci-logger.service,systemd
-bluetooth-force-hci-logger.service,systemd
-bluetooth-hci-dump@.service,systemd
-boot-animation.service,systemd
-console-getty.service,systemd
-console-shell.service,systemd
-container-getty@.service,systemd
-debug-shell.service,systemd
-device-policy-syspopup.service,systemd
-emergency.service,systemd
-factory-reset.service,systemd
-getty@.service,systemd
-init-update.service,systemd
-initrd-cleanup.service,systemd
-initrd-parse-etc.service,systemd
-initrd-switch-root.service,systemd
-initrd-udevadm-cleanup-db.service,systemd
-kmod-static-nodes.service,systemd
-lazy_mount.service,systemd
-ldconfig.service,systemd
-log_dump.service,systemd
-offline-update.service,systemd
-org.tizen.dummyasm.service,systemd
-pkg-db-recovery.service,systemd
-pkgdir-tool.service,systemd
-quotaon.service,systemd
-rescue.service,systemd
-resize2fs@.service,systemd
-security-config.service,systemd
-security-manager-rules-loader.service,systemd
-security-manager-cleanup.service,systemd
-shutdown-animation.service,systemd
-sys-kernel-tracing.service,systemd
-system-popup.service,systemd
-systemd-binfmt.service,systemd
-systemd-exit.service,systemd
-systemd-fsck-root.service,systemd
-systemd-fsck@.service,systemd
-systemd-halt.service,systemd
-systemd-hibernate-resume@.service,systemd
-systemd-hibernate.service,systemd
-systemd-hwdb-update.service,systemd
-systemd-hybrid-sleep.service,systemd
-systemd-initctl.service,systemd
-systemd-journal-catalog-update.service,systemd
-systemd-journal-flush.service,systemd
-systemd-localed.service,systemd
-systemd-machine-id-commit.service,systemd
-systemd-modules-load.service,systemd
-systemd-poweroff.service,systemd
-systemd-quotacheck.service,systemd
-systemd-reboot.service,systemd
-systemd-remount-fs.service,systemd
-systemd-suspend.service,systemd
-systemd-sysctl.service,systemd
-systemd-tmpfiles-setup-dev.service,systemd
-systemd-tmpfiles-setup.service,systemd
-systemd-udev-settle.service,systemd
-systemd-udev-trigger.service,systemd
-systemd-update-done.service,systemd
-systemd-update-utmp-runlevel.service,systemd
-systemd-update-utmp.service,systemd
-systemd-user-sessions.service,systemd
-systemd-vconsole-setup.service,systemd
-tizen-fstrim-user.service,systemd
-tizen-system-env.service,systemd
-tizenid.service,systemd
-ttrace-marker.service,systemd
-udev-sdb-init.service,systemd
-webappenc-initializer.service,systemd
-factory-reset-launch.service,dbus
-org.freedesktop.systemd1.service,dbus
-org.tizen.system.popup.service,dbus
-org.tizen.factory-reset.service,dbus
-org.tizen.system.crash.service,dbus
-org.tizen.dpm.syspopup.service,dbus
+++ /dev/null
-ac.service,systemd,app_fw,app_fw
-accounts-service.service,systemd,service_fw,service_fw
-alarm-manager,systemd,app_fw,app_fw
-auth-fw.service,systemd,security_fw,security_fw
-bluetooth-frwk.service,systemd,network_fw,network_fw
-bluetooth-share.service,systemd,network_fw,network_fw
-bluetooth-map-agent.service,systemd,network_fw,network_fw
-bluetooth-pbap-agent.service,systemd,network_fw,network_fw
-browser-provider.service,systemd,web_fw,web_fw
-buxton2.service,systemd,buxton,buxton
-callmgr.service,systemd,telephony,telephony
-central-key-manager.service,systemd,key-manager,key-manager
-cert-checker.service,systemd,security_fw,security_fw
-cert-server.service,systemd,security_fw,security_fw
-connman.service,systemd,network_fw,network_fw
-connman_tv.service,systemd,network_fw,network_fw
-connman-vpn.service,systemd,network_fw,network_fw
-contextd.service,systemd,service_fw,service_fw
-csr.service,systemd,security_fw,security_fw
-cynara.service,systemd,cynara,cynara
-data-provider-master.service,systemd,app_fw,app_fw
-dbus.service,systemd,dbus,dbus
-device-policy-manager.service,systemd,security_fw,security_fw
-download-provider.service,systemd,web_fw,web_fw
-esd.service,systemd,app_fw,app_fw
-feedbackd.service,systemd,system_fw,system_fw
-fido-asm.service,systemd,service_fw,service_fw
-fido-bt-roaming-agent.service,systemd,service_fw,service_fw
-lbs-server.service,systemd,location,location
-license-manager-agent.service,systemd,security_fw,security_fw
-media-server.service,systemd,multimedia_fw,multimedia_fw
-media-controller.service,systemd,multimedia_fw,multimedia_fw
-mobileap-agent.service,systemd,network_fw,network_fw
-msg-server.service,systemd,messaging,messaging
-mtp-responder.service,systemd,network_fw,network_fw
-mtp-initiator.service,systemd,network_fw,network_fw
-muse-server.service,systemd,multimedia_fw,multimedia_fw
-murphyd.service,systemd,multimedia_fw,multimedia_fw
-nether.service,systemd,security_fw,security_fw
-net-config.service,systemd,network_fw,network_fw
-net-config_tv.service,systemd,network_fw,network_fw
-nfc-manager.service,systemd,network_fw,network_fw
-ode.service,systemd,security_fw,security_fw
-package-manager.service,systemd,app_fw,app_fw
-package-recovery.service,systemd,app_fw,app_fw
-pass.service,systemd,system_fw,system_fw
-phonenumber-utils.service,systemd,service_fw,service_fw
-privacy-guard-server.service,systemd,security_fw,security_fw
-pushd.service,systemd,service_fw,service_fw
-sensord.service,systemd,sensor,sensor
-stc-manager.service,systemd,network_fw,network_fw
-telephony-daemon.service,systemd,telephony,telephony
-wifi-direct-manager.service,systemd,network_fw,network_fw
-wmeshd.service,systemd,network_fw,network_fw
-zigbee-daemon.service,systemd,network_fw,network_fw
-net.asp.service,dbus,network_fw,network_fw
-net.connman.service,dbus,network_fw,network_fw
-net.connman.vpn.service,dbus,network_fw,network_fw
-net.netconfig.service,dbus,network_fw,network_fw
-net.wifidirect.service,dbus,network_fw,network_fw
-net.wmesh.service,dbus,network_fw,network_fw
-org.bluez.obex.service,dbus,network_fw,network_fw
-org.bluez.map_agent.service,dbus,network_fw,network_fw
-org.bluez.pb_agent.service,dbus,network_fw,network_fw
-org.bluez.ag_agent.service,dbus,network_fw,network_fw
-org.projectx.bt.service,dbus,network_fw,network_fw
-org.tizen.account.manager.service,dbus,service_fw,service_fw
-org.tizen.alarm.manager.service,dbus,app_fw,app_fw
-org.tizen.data-provider-master.service,dbus,app_fw,app_fw
-org.tizen.fido-asm.service,dbus,service_fw,service_fw
-org.tizen.fido-bt-roaming.service,dbus,service_fw,service_fw
-org.tizen.lbs.Providers.LbsServer.service,dbus,location,location
-org.tizen.MobileapAgent.service,dbus,network_fw,network_fw
-org.tizen.NetNfcService.service,dbus,network_fw,network_fw
-org.tizen.PhonenumberUtils.dbus.service,dbus,service_fw,service_fw
-org.tizen.pkgmgr.service,dbus,app_fw,app_fw
-org.tizen.pkg_recovery.service,dbus,app_fw,app_fw
-org.tizen.scmirroring.server.service,dbus,multimedia_fw,multimedia_fw
-org.tizen.SmartcardService.service,dbus,network_fw,network_fw
-org.tizen.smartreply.service,dbus,ui_fw,ui_fw
-org.tizen.zigbee.service,dbus,network_fw,network_fw
\ No newline at end of file
+++ /dev/null
-ac.service,systemd,app_fw,app_fw
-accounts-service.service,systemd,service_fw,service_fw
-alarm-manager,systemd,app_fw,app_fw
-auth-fw.service,systemd,security_fw,security_fw
-bluetooth-frwk.service,systemd,network_fw,network_fw
-bluetooth-share.service,systemd,network_fw,network_fw
-bluetooth-map-agent.service,systemd,network_fw,network_fw
-bluetooth-pbap-agent.service,systemd,network_fw,network_fw
-browser-provider.service,systemd,web_fw,web_fw
-buxton2.service,systemd,buxton,buxton
-callmgr.service,systemd,telephony,telephony
-central-key-manager.service,systemd,key-manager,key-manager
-cert-checker.service,systemd,security_fw,security_fw
-cert-server.service,systemd,security_fw,security_fw
-connman.service,systemd,network_fw,network_fw
-connman_tv.service,systemd,network_fw,network_fw
-connman-vpn.service,systemd,network_fw,network_fw
-contextd.service,systemd,service_fw,service_fw
-csr.service,systemd,security_fw,security_fw
-cynara.service,systemd,cynara,cynara
-data-provider-master.service,systemd,app_fw,app_fw
-dbus.service,systemd,dbus,dbus
-device-policy-manager.service,systemd,security_fw,security_fw
-download-provider.service,systemd,web_fw,web_fw
-esd.service,systemd,app_fw,app_fw
-feedbackd.service,systemd,system_fw,system_fw
-fido-asm.service,systemd,service_fw,service_fw
-fido-bt-roaming-agent.service,systemd,service_fw,service_fw
-lbs-server.service,systemd,location,location
-license-manager-agent.service,systemd,security_fw,security_fw
-media-server.service,systemd,multimedia_fw,multimedia_fw
-media-controller.service,systemd,multimedia_fw,multimedia_fw
-mobileap-agent.service,systemd,network_fw,network_fw
-msg-server.service,systemd,messaging,messaging
-mtp-responder.service,systemd,network_fw,network_fw
-mtp-initiator.service,systemd,network_fw,network_fw
-muse-server.service,systemd,multimedia_fw,multimedia_fw
-murphyd.service,systemd,multimedia_fw,multimedia_fw
-nether.service,systemd,security_fw,security_fw
-net-config.service,systemd,network_fw,network_fw
-net-config_tv.service,systemd,network_fw,network_fw
-nfc-manager.service,systemd,network_fw,network_fw
-ode.service,systemd,security_fw,security_fw
-package-manager.service,systemd,app_fw,app_fw
-package-recovery.service,systemd,app_fw,app_fw
-pass.service,systemd,system_fw,system_fw
-phonenumber-utils.service,systemd,service_fw,service_fw
-privacy-guard-server.service,systemd,security_fw,security_fw
-pushd.service,systemd,service_fw,service_fw
-sensord.service,systemd,sensor,sensor
-stc-manager.service,systemd,network_fw,network_fw
-telephony-daemon.service,systemd,telephony,telephony
-wifi-direct-manager.service,systemd,network_fw,network_fw
-wmeshd.service,systemd,network_fw,network_fw
-zigbee-daemon.service,systemd,network_fw,network_fw
-net.asp.service,dbus,network_fw,network_fw
-net.connman.service,dbus,network_fw,network_fw
-net.connman.vpn.service,dbus,network_fw,network_fw
-net.netconfig.service,dbus,network_fw,network_fw
-net.wifidirect.service,dbus,network_fw,network_fw
-net.wmesh.service,dbus,network_fw,network_fw
-org.bluez.obex.service,dbus,network_fw,network_fw
-org.bluez.map_agent.service,dbus,network_fw,network_fw
-org.bluez.pb_agent.service,dbus,network_fw,network_fw
-org.bluez.ag_agent.service,dbus,network_fw,network_fw
-org.projectx.bt.service,dbus,network_fw,network_fw
-org.tizen.account.manager.service,dbus,service_fw,service_fw
-org.tizen.alarm.manager.service,dbus,app_fw,app_fw
-org.tizen.data-provider-master.service,dbus,app_fw,app_fw
-org.tizen.fido-asm.service,dbus,service_fw,service_fw
-org.tizen.fido-bt-roaming.service,dbus,service_fw,service_fw
-org.tizen.lbs.Providers.LbsServer.service,dbus,location,location
-org.tizen.MobileapAgent.service,dbus,network_fw,network_fw
-org.tizen.NetNfcService.service,dbus,network_fw,network_fw
-org.tizen.PhonenumberUtils.dbus.service,dbus,service_fw,service_fw
-org.tizen.pkgmgr.service,dbus,app_fw,app_fw
-org.tizen.pkg_recovery.service,dbus,app_fw,app_fw
-org.tizen.scmirroring.server.service,dbus,multimedia_fw,multimedia_fw
-org.tizen.SmartcardService.service,dbus,network_fw,network_fw
-org.tizen.smartreply.service,dbus,ui_fw,ui_fw
-org.tizen.zigbee.service,dbus,network_fw,network_fw
\ No newline at end of file
+++ /dev/null
-app2sd-server.service,systemd
-deviced.service,systemd
-dlog_logger.service,systemd
-display-manager.service,systemd
-faultd.service,systemd
-gumd.service,systemd
-krate.service,systemd
-resourced.service,systemd
-security-manager.service,systemd
-storaged.service,systemd
-systemd-ask-password-console.service,systemd
-systemd-ask-password-wall.service,systemd
-systemd-journald.service,systemd
-systemd-kexec.service,systemd
-systemd-logind.service,systemd
-systemd-nspawn@.service,systemd
-systemd-udevd.service,systemd
-tlm.service,systemd
-usb-host-ffs-test-daemon.service,systemd
-org.tizen.app2sd.service,dbus
-org.projectx.bt_core.service,dbus
\ No newline at end of file
+++ /dev/null
-app2sd-server.service,systemd
-deviced.service,systemd
-dlog_logger.service,systemd
-display-manager.service,systemd
-faultd.service,systemd
-gumd.service,systemd
-krate.service,systemd
-resourced.service,systemd
-security-manager.service,systemd
-storaged.service,systemd
-systemd-ask-password-console.service,systemd
-systemd-ask-password-wall.service,systemd
-systemd-journald.service,systemd
-systemd-kexec.service,systemd
-systemd-logind.service,systemd
-systemd-nspawn@.service,systemd
-systemd-udevd.service,systemd
-tlm.service,systemd
-usb-host-ffs-test-daemon.service,systemd
-org.tizen.app2sd.service,dbus
-org.projectx.bt_core.service,dbus
\ No newline at end of file
+++ /dev/null
-pulseaudio.service,systemd,ID_DEFINED_IN_CODE,pulse,pulse
-autovt@.service,systemd,NEED_TO_CHECK
-dbus-org.freedesktop.locale1.service,systemd,NEED_TO_CHECK
-dbus-org.freedesktop.login1.service,systemd,NEED_TO_CHECK
-sdbd_tcp.service,systemd,NEED_TO_CHECK
-serial-getty@.service,systemd,NEED_TO_CHECK
-systemd-tmpfiles-clean.service,systemd,NEED_TO_CHECK
-tizen-debug-off.service,systemd,NEED_TO_CHECK
-tizen-debug-on.service,systemd,NEED_TO_CHECK
-org.freedesktop.locale1.service,dbus,NEED_TO_CHECK
-org.freedesktop.login1.service,dbus,NEED_TO_CHECK
-org.tizen.fido.service,dbus,NEED_TO_CHECK
-org.O1.SecurityAccounts.gUserManagement.service,dbus,NEED_TO_CHECK
+++ /dev/null
-__user@.service,systemd,NEED_TO_CHECK
-dlog_logger.service,systemd,ID_DEFINED_IN_CODE,log,log
-askuser.service,systemd,NEED_TO_CHECK
+++ /dev/null
-bluetooth-hci-device.service,systemd
-bluetooth-hciattach@.service,systemd
-bluetooth-address.service,systemd
-bluetooth-hci-logger.service,systemd
-bluetooth-force-hci-logger.service,systemd
-bluetooth-hci-dump@.service,systemd
-boot-animation.service,systemd
-console-getty.service,systemd
-console-shell.service,systemd
-container-getty@.service,systemd
-debug-shell.service,systemd
-device-policy-syspopup.service,systemd
-emergency.service,systemd
-factory-reset.service,systemd
-getty@.service,systemd
-init-update.service,systemd
-initrd-cleanup.service,systemd
-initrd-parse-etc.service,systemd
-initrd-switch-root.service,systemd
-initrd-udevadm-cleanup-db.service,systemd
-kmod-static-nodes.service,systemd
-lazy_mount.service,systemd
-ldconfig.service,systemd
-log_dump.service,systemd
-offline-update.service,systemd
-org.tizen.dummyasm.service,systemd
-pkg-db-recovery.service,systemd
-pkgdir-tool.service,systemd
-quotaon.service,systemd
-rescue.service,systemd
-resize2fs@.service,systemd
-security-config.service,systemd
-security-manager-rules-loader.service,systemd
-security-manager-cleanup.service,systemd
-shutdown-animation.service,systemd
-sys-kernel-tracing.service,systemd
-system-popup.service,systemd
-systemd-binfmt.service,systemd
-systemd-exit.service,systemd
-systemd-fsck-root.service,systemd
-systemd-fsck@.service,systemd
-systemd-halt.service,systemd
-systemd-hibernate-resume@.service,systemd
-systemd-hibernate.service,systemd
-systemd-hwdb-update.service,systemd
-systemd-hybrid-sleep.service,systemd
-systemd-initctl.service,systemd
-systemd-journal-catalog-update.service,systemd
-systemd-journal-flush.service,systemd
-systemd-localed.service,systemd
-systemd-machine-id-commit.service,systemd
-systemd-modules-load.service,systemd
-systemd-poweroff.service,systemd
-systemd-quotacheck.service,systemd
-systemd-reboot.service,systemd
-systemd-remount-fs.service,systemd
-systemd-suspend.service,systemd
-systemd-sysctl.service,systemd
-systemd-tmpfiles-setup-dev.service,systemd
-systemd-tmpfiles-setup.service,systemd
-systemd-udev-settle.service,systemd
-systemd-udev-trigger.service,systemd
-systemd-update-done.service,systemd
-systemd-update-utmp-runlevel.service,systemd
-systemd-update-utmp.service,systemd
-systemd-user-sessions.service,systemd
-systemd-vconsole-setup.service,systemd
-tizen-fstrim-user.service,systemd
-tizen-system-env.service,systemd
-tizenid.service,systemd
-ttrace-marker.service,systemd
-udev-sdb-init.service,systemd
-webappenc-initializer.service,systemd
-factory-reset-launch.service,dbus
-org.freedesktop.systemd1.service,dbus
-org.tizen.system.popup.service,dbus
-org.tizen.factory-reset.service,dbus
-org.tizen.system.crash.service,dbus
-org.tizen.dpm.syspopup.service,dbus
+++ /dev/null
-aul.service,systemd
-alsa-restore.service,systemd
-alsa-state.service,systemd
-alsa-store.service,systemd
-autovt@.service,systemd
-bluetooth-address.service,systemd
-bluetooth-hci-device.service,systemd
-bluetooth-hciattach@.service,systemd
-boot-animation.service,systemd
-console-getty.service,systemd
-console-shell.service,systemd
-container-getty@.service,systemd
-dbus-org.freedesktop.hostname1.service,systemd
-dbus-org.freedesktop.locale1.service,systemd
-dbus-org.freedesktop.machine1.service,systemd
-debug-shell.service,systemd
-deviced-pre.service,systemd
-emergency.service,systemd
-getty@.service,systemd
-initrd-cleanup.service,systemd
-initrd-parse-etc.service,systemd
-initrd-switch-root.service,systemd
-initrd-udevadm-cleanup-db.service,systemd
-kmod-static-nodes.service,systemd
-late-tizen-system.service,systemd
-ldconfig.service,systemd
-mediacontroller.service,systemd
-quotaon.service,systemd
-rescue.service,systemd
-resize2fs@.service,systemd
-sdb-prestart.service,systemd
-security-manager-cleanup.service,systemd
-security-manager-rules-loader.service,systemd
-serial-getty@.service,systemd
-shutdown-animation.service,systemd
-silent-animation.service,systemd
-systemd-ask-password-console.service,systemd
-systemd-ask-password-wall.service,systemd
-systemd-binfmt.service,systemd
-systemd-bootchart.service,systemd
-systemd-fsck-root.service,systemd
-systemd-fsck@.service,systemd
-systemd-halt.service,systemd
-systemd-hibernate-resume@.service,systemd
-systemd-hibernate.service,systemd
-systemd-hostnamed.service,systemd
-systemd-hwdb-update.service,systemd
-systemd-hybrid-sleep.service,systemd
-systemd-initctl.service,systemd
-systemd-journal-catalog-update.service,systemd
-systemd-journal-flush.service,systemd
-systemd-kexec.service,systemd
-systemd-localed.service,systemd
-systemd-machine-id-commit.service,systemd
-systemd-machined.service,systemd
-systemd-modules-load.service,systemd
-systemd-nspawn@.service,systemd
-systemd-poweroff.service,systemd
-systemd-quotacheck.service,systemd
-systemd-reboot.service,systemd
-systemd-remount-fs.service,systemd
-systemd-shutdownd.service,systemd
-systemd-suspend.service,systemd
-systemd-sysctl.service,systemd
-systemd-tmpfiles-clean.service,systemd
-systemd-tmpfiles-setup-dev.service,systemd
-systemd-tmpfiles-setup.service,systemd
-systemd-udev-settle.service,systemd
-systemd-udev-trigger.service,systemd
-systemd-update-done.service,systemd
-systemd-update-utmp-runlevel.service,systemd
-systemd-update-utmp.service,systemd
-systemd-user-sessions.service,systemd
-systemd-vconsole-setup.service,systemd
-tbm-drm-auth.service,systemd
-tdm-socket.service,systemd
-tizen-system-env.service,systemd
-tizenid.service,systemd
-ttrace-marker.service,systemd
-webappenc-initializer.service,systemd
-zbooting-done.service,systemd
-umount-opt.service,systemd
-security-config.service,systemd
-tizen-fstrim-user.service,systemd
-buxton2.service,systemd
-pulseaudio.service,systemd
-lbs-server.service,systemd
-nether.service,systemd
-user@.service,systemd
-display-manager.service,systemd
-tizen-debug-off.service,systemd
-tizen-debug-on.service,systemd
-org.freedesktop.hostname1.service,dbus
-org.freedesktop.locale1.service,dbus
-org.freedesktop.machine1.service,dbus
-org.bluez.hf_agent.service,dbus
-org.projectx.bt_core.service,dbus
+++ /dev/null
-ac.service,systemd,app_fw,app_fw
-accounts-service.service,systemd,service_fw,service_fw
-alarm-manager,systemd,app_fw,app_fw
-auth-fw.service,systemd,security_fw,security_fw
-bluetooth-frwk.service,systemd,network_fw,network_fw
-bluetooth-share.service,systemd,network_fw,network_fw
-bluetooth-map-agent.service,systemd,network_fw,network_fw
-bluetooth-pbap-agent.service,systemd,network_fw,network_fw
-browser-provider.service,systemd,web_fw,web_fw
-buxton2.service,systemd,buxton,buxton
-callmgr.service,systemd,telephony,telephony
-central-key-manager.service,systemd,key-manager,key-manager
-cert-checker.service,systemd,security_fw,security_fw
-cert-server.service,systemd,security_fw,security_fw
-connman.service,systemd,network_fw,network_fw
-connman_tv.service,systemd,network_fw,network_fw
-connman-vpn.service,systemd,network_fw,network_fw
-contextd.service,systemd,service_fw,service_fw
-csr.service,systemd,security_fw,security_fw
-cynara.service,systemd,cynara,cynara
-data-provider-master.service,systemd,app_fw,app_fw
-dbus.service,systemd,dbus,dbus
-device-policy-manager.service,systemd,security_fw,security_fw
-download-provider.service,systemd,web_fw,web_fw
-esd.service,systemd,app_fw,app_fw
-feedbackd.service,systemd,system_fw,system_fw
-fido-asm.service,systemd,service_fw,service_fw
-fido-bt-roaming-agent.service,systemd,service_fw,service_fw
-lbs-server.service,systemd,location,location
-license-manager-agent.service,systemd,security_fw,security_fw
-media-server.service,systemd,multimedia_fw,multimedia_fw
-media-controller.service,systemd,multimedia_fw,multimedia_fw
-mobileap-agent.service,systemd,network_fw,network_fw
-msg-server.service,systemd,messaging,messaging
-mtp-responder.service,systemd,network_fw,network_fw
-mtp-initiator.service,systemd,network_fw,network_fw
-muse-server.service,systemd,multimedia_fw,multimedia_fw
-murphyd.service,systemd,multimedia_fw,multimedia_fw
-nether.service,systemd,security_fw,security_fw
-net-config.service,systemd,network_fw,network_fw
-net-config_tv.service,systemd,network_fw,network_fw
-nfc-manager.service,systemd,network_fw,network_fw
-ode.service,systemd,security_fw,security_fw
-package-manager.service,systemd,app_fw,app_fw
-package-recovery.service,systemd,app_fw,app_fw
-pass.service,systemd,system_fw,system_fw
-phonenumber-utils.service,systemd,service_fw,service_fw
-privacy-guard-server.service,systemd,security_fw,security_fw
-pushd.service,systemd,service_fw,service_fw
-sensord.service,systemd,sensor,sensor
-stc-manager.service,systemd,network_fw,network_fw
-telephony-daemon.service,systemd,telephony,telephony
-wifi-direct-manager.service,systemd,network_fw,network_fw
-wmeshd.service,systemd,network_fw,network_fw
-zigbee-daemon.service,systemd,network_fw,network_fw
-net.asp.service,dbus,network_fw,network_fw
-net.connman.service,dbus,network_fw,network_fw
-net.connman.vpn.service,dbus,network_fw,network_fw
-net.netconfig.service,dbus,network_fw,network_fw
-net.wifidirect.service,dbus,network_fw,network_fw
-net.wmesh.service,dbus,network_fw,network_fw
-org.bluez.obex.service,dbus,network_fw,network_fw
-org.bluez.map_agent.service,dbus,network_fw,network_fw
-org.bluez.pb_agent.service,dbus,network_fw,network_fw
-org.bluez.ag_agent.service,dbus,network_fw,network_fw
-org.projectx.bt.service,dbus,network_fw,network_fw
-org.tizen.account.manager.service,dbus,service_fw,service_fw
-org.tizen.alarm.manager.service,dbus,app_fw,app_fw
-org.tizen.data-provider-master.service,dbus,app_fw,app_fw
-org.tizen.fido-asm.service,dbus,service_fw,service_fw
-org.tizen.fido-bt-roaming.service,dbus,service_fw,service_fw
-org.tizen.lbs.Providers.LbsServer.service,dbus,location,location
-org.tizen.MobileapAgent.service,dbus,network_fw,network_fw
-org.tizen.NetNfcService.service,dbus,network_fw,network_fw
-org.tizen.PhonenumberUtils.dbus.service,dbus,service_fw,service_fw
-org.tizen.pkgmgr.service,dbus,app_fw,app_fw
-org.tizen.pkg_recovery.service,dbus,app_fw,app_fw
-org.tizen.scmirroring.server.service,dbus,multimedia_fw,multimedia_fw
-org.tizen.SmartcardService.service,dbus,network_fw,network_fw
-org.tizen.smartreply.service,dbus,ui_fw,ui_fw
-org.tizen.zigbee.service,dbus,network_fw,network_fw
\ No newline at end of file
+++ /dev/null
-accounts-service.service,systemd,service_fw,service_fw
-alarm-server.service,systemd,app_fw,app_fw
-auth-fw.service,systemd,security_fw,security_fw
-bluetooth-frwk.service,systemd,owner,users
-buxton2.service,systemd,buxton,buxton
-central-key-manager.service,systemd,key-manager,key-manager
-cert-server.service,systemd,security_fw,security_fw
-cynara.service,systemd,cynara,cynara
-csr.service,systemd,security_fw,security_fw
-data-provider-master.service,systemd,app_fw,app_fw
-dbus.service,systemd,dbus,dbus
-deviced-vibrator.service,systemd,system_fw,system_fw
-dlog_logger.service,systemd,log,log
-download-provider.service,systemd,web_fw,web_fw
-esd.service,systemd,app_fw,app_fw
-focus-server.service,systemd,multimedia_fw,multimedia_fw
-media-server.service,systemd,multimedia_fw,multimedia_fw
-msg-server.service,systemd,messaging,messaging
-mtp-responder.service,systemd,owner,users
-muse-server.service,systemd,multimedia_fw,multimedia_fw
-nfc-manager.service,systemd,network_fw,network_fw
-phonenumber-utils.service,systemd,service_fw,service_fw
-pulseaudio.service,systemd,pulse,pulse
-sensord.service,systemd,sensor,input
-sound-server.service,systemd,multimedia_fw,multimedia_fw
-telephony-daemon.service,systemd,telephony,telephony
-org.tizen.account.manager.service,dbus,service_fw,service_fw
-org.tizen.data-provider-master.service,dbus,app_fw,app_fw
-org.tizen.PhonenumberUtils.dbus.service,dbus,service_fw,service_fw
-org.projectx.bt.service,dbus,owner,users
-org.tizen.alarm.manager.service,dbus,app_fw,app_fw
-org.tizen.SmartcardService.service,dbus,network_fw,network_fw
-org.tizen.fido.service,dbus,service_fw,service_fw
-org.tizen.dummyasm.service,dbus,service_fw,service_fw
-org.tizen.system.popup.service,dbus,system_fw,system_fw
-org.tizen.NetNfcService.service,dbus,network_fw,network_fw
-org.tizen.lbs.Providers.LbsServer.service,dbus,location,location
-org.tizen.SoundServer.service,dbus,multimedia_fw,multimedia_fw
-package-manager.service,systemd,app_fw,app_fw
-pkgdir-tool.service,systemd,app_fw,app_fw
-pushd.service,systemd,service_fw,service_fw
-device-policy-manager.service,systemd,security_fw,security_fw
-modemd.service,systemd,telephony,telephony
-nvitemd.service,systemd,telephony,telephony
+++ /dev/null
-app2sd-server.service,systemd
-deviced.service,systemd
-dlog_logger.service,systemd
-display-manager.service,systemd
-faultd.service,systemd
-gumd.service,systemd
-krate.service,systemd
-resourced.service,systemd
-security-manager.service,systemd
-storaged.service,systemd
-systemd-ask-password-console.service,systemd
-systemd-ask-password-wall.service,systemd
-systemd-journald.service,systemd
-systemd-kexec.service,systemd
-systemd-logind.service,systemd
-systemd-nspawn@.service,systemd
-systemd-udevd.service,systemd
-tlm.service,systemd
-usb-host-ffs-test-daemon.service,systemd
-org.tizen.app2sd.service,dbus
-org.projectx.bt_core.service,dbus
\ No newline at end of file
+++ /dev/null
-connman.service,systemd
-dbus-org.freedesktop.login1.service,systemd
-deviced.service,systemd
-net-config.service,systemd
-resourced.service,systemd
-security-manager.service,systemd
-systemd-journald.service,systemd
-systemd-logind.service,systemd
-systemd-udevd.service,systemd
-systemd-exit.service,systemd
-tlm.service,systemd
-app2sd-server.service,systemd
-connman-vpn.service,systemd
-mobileap-agent.service,systemd
-wifi-direct-manager.service,systemd
-sdbd.service,systemd
-sdbd_tcp.service,systemd
-gumd.service,systemd
-init-update.service,systemd
-offline-update.service,systemd
-org.freedesktop.systemd1.service,dbus
-org.tizen.app2sd.service,dbus
-org.tizen.MobileapAgent.service,dbus
-org.freedesktop.login1.service,dbus
-org.tizen.pkgdir_tool.service,dbus
-org.tizen.pkgmgr.service,dbus
-org.O1.SecurityAccounts.gUserManagement.service,dbus
-net.wifidirect.service,dbus
-net.connman.service,dbus
-net.connman.vpn.service,dbus
-net.netconfig.service,dbus
-org.tizen.system.crash.service,dbus
+++ /dev/null
-#!/bin/bash
-
-# @file root_minimization.sh
-# @author Seongwook Chung (seong.chung@samsung.com)
-# @brief Check each service file(systemd/dbus) whether it is running as root or non-root
-# Check if there is new root service
-
-PATH=/bin:/usr/bin:/sbin:/usr/sbin
-SYSTEMD_PATH="/usr/lib/systemd/system"
-DBUS_PATH="/usr/share/dbus-1/system-services"
-ROOT_LIST="/opt/share/security-config/test/root_test/root_daemon_list"
-NON_DAEMON_LIST="/opt/share/security-config/test/root_test/non_daemon_list"
-NON_ROOT_LIST="/opt/share/security-config/test/root_test/non_root_list"
-EXCEPTION_LIST="/opt/share/security-config/test/root_test/exception_list"
-LOG_FAILED_SERVICES="/opt/share/security-config/log/root_test_failed_list.log"
-LOG_NEW_ROOT_SERVICES="/opt/share/security-config/log/root_test_new_root.log"
-RESULT_FAILED_SERVICES="/opt/share/security-config/result/root_test_failed_list.result"
-RESULT_NEW_ROOT_SERVICES="/opt/share/security-config/result/root_test_new_root.result"
-
-checkNonRootList(){
-
- # $1 : service_name
- # $2 : service_type
- # $3 : expected uid
- # $4 : expected gid
-
- if [ "$2" = "systemd" ]; then
- service_path="$SYSTEMD_PATH/$1"
- elif [ "$2" = "dbus" ]; then
- service_path="$DBUS_PATH/$1"
- fi
-
- comment_check_user_id=0
- comment_check_group_id=0
- flag_user_id=0
- flag_group_id=0
- flag_systemd_service=0
-
- # check contents of service file (like fgets in C)
- for line in $(/bin/cat $service_path)
- do
- if [[ "${line}" == *User=* ]];
- then
- # Should check whether #(comment) is in front of User=
- # This makes neutralize making non-root user id
- # We don't allow this case
- if [[ "${line}" == *'#'User=* ]];
- then
- comment_check_user_id=1
- fi
- flag_user_id=1
- # Get value(user id) behind User=
- real_uid=`/bin/echo $line | /usr/bin/awk -F "=" '{print $2}'`
- fi
- if [[ "${line}" == *Group=* ]];
- then
- # Should check whether #(comment) is in front of User=
- # This makes neutralize making non-root group id
- # We don't allow this case
- if [[ "${line}" == *'#'Group=* ]];
- then
- comment_check_group_id=1
- fi
- flag_group_id=1
- # Get value(group id) behind Group=
- real_gid=`/bin/echo $line | /usr/bin/awk -F "=" '{print $2}'`
- fi
- if [[ "${line}" == *SystemdService=* ]];
- then
- flag_systemd_service=1
- # Get value(name of systemd service) behind SystemdService=
- systemd_service_name=`/bin/echo $line | /usr/bin/awk -F "=" '{print $2}'`
- fi
- if [[ "${line}" == *ExecStart=* ]];
- then
- flag_exec_systemd=1
- exec_name_systemd=`/bin/echo $line | /usr/bin/awk -F "=" '{print $2}'`
- fi
- if [[ "${line}" == *Exec=* ]];
- then
- flag_exec_dbus=1
- exec_name_dbus=`/bin/echo $line | /usr/bin/awk -F "=" '{print $2}'`
- fi
- done
-
- # If dbus service has attribute; "SystemdService", we focus on service of systemd
- # Should find "User=" and "Group=" of systemd service and extract value as new one
- if [ $flag_systemd_service -eq 1 ]; then
- comment_check_user_id=0
- comment_check_group_id=0
- flag_user_id=0
- flag_group_id=0
- /bin/echo "## SystemdService is set: $systemd_service_name"
- service_path="$SYSTEMD_PATH/$systemd_service_name"
- for line in $(/bin/cat $service_path)
- do
- if [[ "${line}" == *User=* ]];
- then
- # Should check whether #(comment) is in front of User=
- # This makes neutralize making non-root user id
- # We don't allow this case
- if [[ "${line}" == *'#'User=* ]];
- then
- comment_check_user_id=1
- fi
- flag_user_id=1
- # Get value(user id) behind User=
- real_uid=`/bin/echo $line | /usr/bin/awk -F "=" '{print $2}'`
- fi
- if [[ "${line}" == *Group=* ]];
- then
- # Should check whether #(comment) is in front of User=
- # This makes neutralize making non-root group id
- # We don't allow this case
- if [[ "${line}" == *'#'Group=* ]];
- then
- comment_check_group_id=1
- fi
- flag_group_id=1
- # Get value(group id) behind Group=
- real_gid=`/bin/echo $line | /usr/bin/awk -F "=" '{print $2}'`
- fi
- done
- fi
-
-
- # Exception case(e.g. pulseaudio.service / buxton2.service / org.bluetooth.share.service)
- for line in $(/bin/cat $EXCEPTION_LIST)
- do
- # awk filters 1st value from "," e.g alarm-server.service,systemd
- service_name=`/bin/echo $line | /usr/bin/awk -F "," '{print $1}'`
- exception_case=`/bin/echo $line | /usr/bin/awk -F "," '{print $3}'`
- if [ $1 = $service_name ]; then
- if [ "$exception_case" = "ONLY_USER_ID" -o "$exception_case" = "ONLY_GROUP_ID" -o "$exception_case" = "ID_DEFINED_IN_CODE" ]; then
- service_type=`/bin/echo $line | /usr/bin/awk -F "," '{print $2}'`
- service_uid=`/bin/echo $line | /usr/bin/awk -F "," '{print $4}'`
- service_gid=`/bin/echo $line | /usr/bin/awk -F "," '{print $5}'`
-
- /bin/echo "## $service_path is in exception_list"
- if [ $2 = "systemd" ]; then
- process_uid=`/bin/ps -ef | /bin/grep $exec_name_systemd | /bin/grep -v grep | /usr/bin/awk -F " " '{print $1}'`
- elif [ $2 = "dbus" ]; then
- process_uid=`/bin/ps -ef | /bin/grep $exec_name_dbus | /bin/grep -v grep | /usr/bin/awk -F " " '{print $1}'`
- fi
-
- if [ $service_uid = $process_uid ]; then
- /bin/echo "##Success, expected uid is $service_uid, and real uid is $process_uid, it is appropriate uid"
- /bin/echo "============================================================================================"
- else
- /bin/echo "@@Failed, expected uid is $service_uid, but real uid is $process_uid, it is not appropriate uid"
- /bin/echo "$service_path, expected uid is $service_uid, but real uid is $process_uid, it is not appropriate uid" >> $LOG_FAILED_SERVICES
- /bin/echo "================================================================================================================" >> $LOG_FAILED_SERVICES
- fi
- return 0
- fi
- fi
- done
-
- # Evaluate result
- # Check comment_check_user_id/group_id and flag_user_id/group_id
- if [ $flag_user_id -eq 0 -a $flag_group_id -eq 0 ]; then
- if [ $expected_uid = "USER" -a $expected_gid = "USER" ]; then
- /bin/echo "## This service sets uid ad user logged in"
- /bin/echo "============================"
- return 0
- fi
- /bin/echo "@@Failed, There is no User= and Group="
- /bin/echo "============================"
-
- /bin/echo "$service_path, There is no User= and Group=" >> $LOG_FAILED_SERVICES
- /bin/echo "=====================================================================" >> $LOG_FAILED_SERVICES
- fi
- if [ $flag_user_id -eq 0 -a $flag_group_id -eq 1 ]; then
- /bin/echo "@@Failed, There is no User="
- /bin/echo "============================"
-
- /bin/echo "$service_path, There is no User=" >> $LOG_FAILED_SERVICES
- /bin/echo "===============================================" >> $LOG_FAILED_SERVICES
- fi
- if [ $flag_user_id -eq 1 -a $flag_group_id -eq 0 ]; then
- /bin/echo "@@Failed, There is no Group="
- /bin/echo "============================"
-
- /bin/echo "$service_path, There is no Group=" >> $LOG_FAILED_SERVICES
- /bin/echo "===============================================" >> $LOG_FAILED_SERVICES
- fi
- if [ $flag_user_id -eq 1 -a $flag_group_id -eq 1 ]; then
- if [ $comment_check_user_id -eq 1 -o $comment_check_group_id -eq 1 ]; then
- /bin/echo "@@Failed, Comment like '#User=' and '#Group=' is not allowed"
- /bin/echo "============================================================"
-
- /bin/echo "$service_path, Comment like '#User=' and '#Group=' is not allowed" >> $LOG_FAILED_SERVICES
- /bin/echo "===============================================================================" >> $LOG_FAILED_SERVICES
- else
- if [ $real_uid = $3 -a $real_gid = $4 ]; then
- /bin/echo "##Success"
- /bin/echo "##expected uid is $3, and real uid is $real_uid, it is appropriated uid"
- /bin/echo "##expected gid is $4, and real gid is $real_gid, it is appropriated gid"
- /bin/echo "======================================================================="
- else
- /bin/echo "@@Failed"
- /bin/echo "@@expected uid is $3, but real uid is $real_uid"
- /bin/echo "@@expected gid is $4, but real gid is $real_gid"
- /bin/echo "==============================================="
-
- /bin/echo "$service_path / expected uid is $3, but real uid is $real_uid" >> $LOG_FAILED_SERVICES
- /bin/echo "$service_path / expected gid is $4, but real gid is $real_gid" >> $LOG_FAILED_SERVICES
- /bin/echo "==================================================================" >> $LOG_FAILED_SERVICES
-
- fi # end of if [ $real_uid = $3 -a $real_gid = $4 ]; then
- fi # end of if [ $comment_check_user_id -eq 1 -o $comment_check_group_id -eq 1 ]; then
- fi # end of if [ $flag_user_id -eq 1 -a $flag_group_id -eq 1 ]; then
-}
-
-checkWhetherNewRoot(){
-
- # $1 : service_name
- # $2 : service_type
-
- comment_check_user_id=0
- comment_check_group_id=0
- flag_user_id=0
- flag_group_id=0
-
- if [ "$2" = "systemd" ]; then
- service_path="$SYSTEMD_PATH/$1"
- elif [ "$2" = "dbus" ]; then
- service_path="$DBUS_PATH/$1"
- fi
-
- for line in $(/bin/cat $EXCEPTION_LIST)
- do
- # awk filters 1st value from "," e.g alarm-server.service,systemd
- service_name=`/bin/echo $line | /usr/bin/awk -F "," '{print $1}'`
- exception_case=`/bin/echo $line | /usr/bin/awk -F "," '{print $3}'`
- if [ $1 = $service_name ]; then
- if [ "$exception_case" = "NEED_TO_CHECK" ]; then
- /bin/echo "## [EXCEPTION] $service_path should be checked why it needs to be root"
- /bin/echo "======================================================================="
- return 0
- fi
- fi
- done
-
- for line in $(/bin/cat $service_path)
- do
- if [[ "${line}" == *User=* ]];
- then
- # Should check whether #(comment) is in front of User=
- # This makes neutralize making non-root user id
- # We don't allow this case
- if [[ "${line}" == *'#'User=* ]];
- then
- comment_check_user_id=1
- fi
- flag_user_id=1
- # Get value(user id) behind User=
- real_uid=`/bin/echo $line | /usr/bin/awk -F "=" '{print $2}'`
- fi
- if [[ "${line}" == *Group=* ]];
- then
- # Should check whether #(comment) is in front of User=
- # This makes neutralize making non-root group id
- # We don't allow this case
- if [[ "${line}" == *'#'Group=* ]];
- then
- comment_check_group_id=1
- fi
- flag_group_id=1
- # Get value(group id) behind Group=
- real_gid=`/bin/echo $line | /usr/bin/awk -F "=" '{print $2}'`
- fi
- done
-
- # Check comment_check_user_id/group_id and flag_user_id/group_id
- if [ $flag_user_id -eq 0 -a $flag_group_id -eq 0 ]; then
- /bin/echo "Service path of unknown: $service_path"
- /bin/echo "@@Failed, There is no User= and Group="
- /bin/echo "==========================================================="
-
- /bin/echo "$service_path is new root" >> $LOG_NEW_ROOT_SERVICES
- /bin/echo "===========================================================" >> $LOG_NEW_ROOT_SERVICES
- fi
- if [ $flag_user_id -eq 0 -a $flag_group_id -eq 1 ]; then
- /bin/echo "Service path of unknown: $service_path"
- /bin/echo "@@Failed, There is no User="
- /bin/echo "==========================================================="
-
- /bin/echo "$service_path is new root" >> $LOG_NEW_ROOT_SERVICES
- /bin/echo "===========================================================" >> $LOG_NEW_ROOT_SERVICES
- fi
- if [ $flag_user_id -eq 1 -a $flag_group_id -eq 0 ]; then
- /bin/echo "Service path of unknown: $service_path"
- /bin/echo "@@Failed, There is no Group="
- /bin/echo "==========================================================="
-
- /bin/echo "$service_path is new root" >> $LOG_NEW_ROOT_SERVICES
- /bin/echo "===========================================================" >> $LOG_NEW_ROOT_SERVICES
- fi
- if [ $flag_user_id -eq 1 -a $flag_group_id -eq 1 ]; then
- if [ $comment_check_user_id -eq 1 -o $comment_check_group_id -eq 1 ]; then
- /bin/echo "@@Failed, Comment is not allowed"
- /bin/echo "============================"
- /bin/echo "$service_path is new root" >> $LOG_NEW_ROOT_SERVICES
- /bin/echo "===========================================================" >> $LOG_NEW_ROOT_SERVICES
- else
- /bin/echo "Service path of unknown: $service_path"
- if [ "$real_uid" = "root" -o "$real_gid" = "root" ]; then
- /bin/echo "@@Failed, why $service_name uses root id?"
- /bin/echo "===================================================="
- /bin/echo "$service_path is new root" >> $LOG_NEW_ROOT_SERVICES
- else
- /bin/echo "## Service $sevice_path is using uid:$real_uid and gid: $real_gid"
- /bin/echo "======================================================================="
- fi
- fi
- fi
-}
-
-checkServiceFile(){
- # $1 : service_name
- # $2 : service_type
-
- if [ "$2" = "systemd" ]; then
- service_path="$SYSTEMD_PATH/$1"
- elif [ "$2" = "dbus" ]; then
- service_path="$DBUS_PATH/$1"
- fi
-
- # Try to find root service
- temp=$(cat $ROOT_LIST | grep $service_name)
- if [ -n "$temp" ]
- then
- /bin/echo "## $service_path is in root_daemon_list"
- /bin/echo "======================================================================="
- return 0
- fi
- # Try to find non-daemon service
- temp=$(cat $NON_DAEMON_LIST | grep $service_name)
- if [ -n "$temp" ]
- then
- /bin/echo "## $service_path is in non_daemon_list"
- /bin/echo "======================================================================="
- return 0
- fi
-
- # Try to find exception case
- temp=$(cat $EXCEPTION_LIST | grep $service_name | grep "EXCEPTED")
- if [ -n "$temp" ]
- then
- /bin/echo "## $service_path is in exception_list"
- /bin/echo "======================================================================="
- return 0
- fi
-
- # Try to find non-root daemon service
- temp=$(cat $NON_ROOT_LIST | grep $service_name)
- if [ -n "$temp" ]
- then
- /bin/echo "## $service_path is in non_root_list"
- service_name=`/bin/echo $temp | /usr/bin/awk -F "," '{print $1}'`
- service_type=`/bin/echo $temp | /usr/bin/awk -F "," '{print $2}'`
- expected_uid=`/bin/echo $temp | /usr/bin/awk -F "," '{print $3}'`
- expected_gid=`/bin/echo $temp | /usr/bin/awk -F "," '{print $4}'`
- checkNonRootList $service_name $service_type $expected_uid $expected_gid
- return 0
- fi
-
- # ## This service would be new daemon / service ##
- checkWhetherNewRoot $1 $2
-
-}
-
-## Let's start service check whether service is root or not from here
-if [ -f $LOG_FAILED_SERVICES ]; then
- /bin/rm $LOG_FAILED_SERVICES
-fi
-
-if [ -f $LOG_NEW_ROOT_SERVICES ]; then
- /bin/rm $LOG_NEW_ROOT_SERVICES
-fi
-
-/bin/echo "##########################################"
-/bin/echo "Below list represents system service files"
-/bin/echo "##########################################"
-
-for entry in $SYSTEMD_PATH/*
-do
- service_name=`/usr/bin/basename "$entry"`
- # Should filter ".socket", "target", ".wants", ".mount", ".automount", ".path", ".slice", ".timer"
- extension=`/bin/echo $service_name | /usr/bin/awk -F "." '{print $NF}'`
- if [ "$extension" = "service" ]; then
- checkServiceFile $service_name "systemd"
- fi
-done
-
-/bin/echo "########################################"
-/bin/echo "Below list represents dbus service files"
-/bin/echo "########################################"
-
-for entry in $DBUS_PATH/*
-do
- service_name=`/usr/bin/basename "$entry"`
- # Should filter ".socket", "target", ".wants", ".mount", ".automount", ".path", ".slice", ".timer"
- extension=`/bin/echo $service_name | /usr/bin/awk -F "." '{print $NF}'`
- if [ "$extension" = "service" ]; then
- checkServiceFile $service_name "dbus"
- fi
-done
-
-if [ -f $LOG_FAILED_SERVICES ]; then
- /bin/echo "NO" > $RESULT_FAILED_SERVICES
-else
- /bin/echo "YES" > $RESULT_FAILED_SERVICES
-fi
-
-if [ -f $LOG_NEW_ROOT_SERVICES ]; then
- /bin/echo "NO" > $RESULT_NEW_ROOT_SERVICES
-else
- /bin/echo "YES" > $RESULT_NEW_ROOT_SERVICES
-fi
INSTALL(FILES
${SHELL_SCRIPT}
DESTINATION
- /opt/share/security-config/test/security_mount_option_test
+ /usr/share/security-config/test/security_mount_option_test
)
then
# there is no sdcard on target. skip this function
return 1
- fi
+ fi
# check SDCARD mount option
chk_sdcard_mnt=$(/bin/cat /proc/mounts | /bin/grep "SDCard" | /bin/grep "noexec" | /bin/grep "nosuid" | /bin/grep "nodev")
fi
}
-if [ ! -d $log_dir ]; then
- /bin/mkdir $log_dir
-fi
-if [ ! -d $result_dir ]; then
- /bin/mkdir $result_dir
-fi
if [ -e $result_file ]
then
/bin/rm $result_file
fi
/bin/echo "Security_mount_optione test is finished"
-
+++ /dev/null
-CMAKE_MINIMUM_REQUIRED(VERSION 2.6)
-
-FILE(GLOB SHELL_SCRIPT *.sh)
-INSTALL(FILES
- ${SHELL_SCRIPT}
- README
- DESTINATION
- /opt/share/security-config/test/setuid_test
-)
-
-
-INSTALL(DIRECTORY
- ${CMAKE_SOURCE_DIR}/test/setuid_test/scripts
- DESTINATION
- /opt/share/security-config/test/setuid_test
-)
+++ /dev/null
-1. Attach target
-2. Run test-setuid.sh at target /usr/share/security-config/test/setuid_test/.
-3. Check test result saved at /usr/share/security-config/test/setuid_test/output/test_result.csv file.
+++ /dev/null
-#!/bin/sh
-#=========================================================
-# Script Begin
-#=========================================================
-echoI "Script Begin"
-#=========================================================
-# [Variable]
-#=========================================================
-PATH=/bin:/usr/bin:/sbin:/usr/sbin
-input_file="$suid_script_dir/setuid.list"
-exception_list="$suid_script_dir/scripts/exception.list"
-is_exception=
-setuid_cnt=
-result_file="$suid_script_dir/result"
-log_file="$suid_script_dir/log.csv"
-function testSetuid {
- echoI "Check setuid"
- $FIND / -perm -4000 -print > $input_file
- while read line; do
- echoI "Check $line"
- is_exception="false"
- while read line2; do
- if [ "$line" = "$line2" ]; then
- is_exception="true"
- fi
- done < $exception_list
- if [ "$is_exception" = "true" ]; then
- ls_ret=`$LS -l $line`
- echoS "$ls_ret, OK - Exception"
- else
- ls_ret=`$LS -l $line`
- permissions=`echo $ls_ret | $CUT -d " " -f1`
- user=`echo $ls_ret | $CUT -d " " -f3`
- group=`echo $ls_ret | $CUT -d " " -f4`
- echoE "$ls_ret, NOK"
- rpm_path=$(/usr/bin/rpm -qf $line)
- echo "$line, $rpm_path, $permissions, $user, $group" >>$log_file
- setuid_cnt=$((setuid_cnt+1))
- fi
- done < $input_file
- $RM $input_file
-}
-
-#=========================================================
-# [00] Delete previous result
-#=========================================================
-$RM $log_file
-$TOUCH $log_file
-$RM $result_file
-$TOUCH $result_file
-echo "#FILE, #PERM, #USER, #GROUP" >>$log_file
-
-#=========================================================
-# [01] Run Test
-#=========================================================
-echoI "Test setuid"
-
-testSetuid
-if [ $((setuid_cnt)) -lt 1 ]; then
- echo "================================================================"
- echo "NO UNPROPER SUID SET"
- echo "================================================================"
- echo ""
- echo "YES" > $result_file
- $RM $log_file
-else
- echo "================================================================"
- echo "UNPROPER SUID SET: $((setuid_cnt))"
- echo "================================================================"
- echo ""
- echo "NO" > $result_file
-fi
-fnPrintSDone
+++ /dev/null
-/usr/bin/su
-/usr/lib/dbus/dbus-daemon-launch-helper
+++ /dev/null
-/usr/bin/su
-/usr/lib/dbus/dbus-daemon-launch-helper
+++ /dev/null
-#!/bin/bash
-
-PATH=/bin:/usr/bin:/sbin:/usr/sbin
-
-#=========================================================
-# [Includes]
-#=========================================================
-. "/opt/share/security-config/test/utils/_sh_util_lib"
-#=========================================================
-# Script Begin
-#=========================================================
-echoI "Script Begin"
-
-source $suid_script_dir/scripts/01_run_setuid_test.sh
-
-if [ ! -d $log_dir ]; then
- echo "make log dir"
- $MKDIR $log_dir
-else
- echo "log dir exist"
-fi
-
-if [ ! -d $result_dir ]; then
- echo "make result dir"
- $MKDIR $result_dir
-else
- echo "result dir exist"
-fi
-if [ -a $suid_script_dir/log.csv ]; then
- $MV $suid_script_dir/log.csv $log_dir/setuid_test.log
-fi
-$MV $suid_script_dir/result $result_dir/setuid_test.result
INSTALL(FILES
${SHELL_SCRIPT}
DESTINATION
- /opt/share/security-config/test/smack_basic_test
+ /usr/share/security-config/test/smack_basic_test
)
{
flag=0
/bin/echo "" >> $log_file
- /bin/echo "2. Smack rule for floor label check" >> $log_file
+ /bin/echo "2. Smack rule for floor label check" >> $log_file
while read pkg_name
do
/bin/echo "Is /sys/fs/smackfs/load2 existed?, No" >> $log_file
/bin/echo "NO" > $result_file
fi
-
+
if [ -e "$smackfs_path/access2" ]
then
/bin/echo "Is /sys/fs/smackfs/access2 existed?, Yes" >> $log_file
/bin/echo "Is /sys/fs/smackfs/netlabel existed?, No" >> $log_file
/bin/echo "NO" > $result_file
fi
-
+
if [ -e "$smackfs_path/ambient" ]
then
/bin/echo "Is /sys/fs/smackfs/ambient existed?, Yes" >> $log_file
/bin/echo "Read sys/fs/smackfs/ptrace , 2 - draconian" >> $log_file
else
/bin/echo "Read sys/fs/smackfs/ptrace , $ptrace_read : invalid value" >> $log_file
- /bin/echo "NO" > $result_file
+ /bin/echo "NO" > $result_file
fi
}
fi
}
-if [ ! -d $log_dir ]; then
- /bin/mkdir $log_dir
-fi
-if [ ! -d $result_dir ]; then
- /bin/mkdir $result_dir
-fi
-
if [ -e $result_file ]
then
/bin/rm $result_file
fi
/bin/echo "Smack basic test is finished"
-
smackrule_exception.list
smackrule_exception_saved.list
DESTINATION
- /opt/share/security-config/test/smack_rule_test
+ /usr/share/security-config/test/smack_rule_test
)
-
log_dir="/opt/share/security-config/log"
result_file=$result_dir"/checksmacklabel.result"
log_file=$log_dir"/checksmacklabel.log"
-exception_file="/opt/share/security-config/test/smack_rule_test/smacklabel_exception.list"
+exception_file="/usr/share/security-config/test/smack_rule_test/smacklabel_exception.list"
function CHECK_EXCEPTION
{
then
return 1
fi
- done < <(cat $exception_file )
+ done < <(cat $exception_file )
return 0
}
}
function LABEL_CHECK
-{
- chsmack $1/* | while read line2
+{
+ chsmack $1/* | while read line2
do
label=$(echo $line2 | rev | cut -f1 -d " " | rev)
cutted_label=${label:0:3}
if [ "$cutted_label" == 'acc' ]
then
CHECK_RULE_ACCESS
- elif [ "$cutted_label" == 'exe' ]
+ elif [ "$cutted_label" == 'exe' ]
then
CHECK_RULE_EXECUTE
label=$(echo $line2 | rev | cut -f2 -d " " | rev)
CHECK_RULE_ACCESS
- elif [ "$cutted_label" == 'tra' ]
+ elif [ "$cutted_label" == 'tra' ]
then
label=$(echo $line2 | rev | cut -f2 -d " " | rev)
cutted_label=${label:0:3}
if [ "$cutted_label" == 'acc' ]
then
CHECK_RULE_ACCESS
- elif [ "$cutted_label" == 'exe' ]
+ elif [ "$cutted_label" == 'exe' ]
then
CHECK_RULE_EXECUTE
label=$(echo $line2 | rev | cut -f3 -d " " | rev)
- CHECK_RULE_ACCESS
- fi
+ CHECK_RULE_ACCESS
+ fi
fi
done
- chsmack $1/.* | while read line2
+ chsmack $1/.* | while read line2
do
label=$(echo $line2 | rev | cut -f1 -d " " | rev)
cutted_label=${label:0:3}
if [ "$cutted_label" == 'acc' ]
then
CHECK_RULE_ACCESS
- elif [ "$cutted_label" == 'exe' ]
+ elif [ "$cutted_label" == 'exe' ]
then
CHECK_RULE_EXECUTE
label=$(echo $line2 | rev | cut -f2 -d " " | rev)
CHECK_RULE_ACCESS
- elif [ "$cutted_label" == 'tra' ]
+ elif [ "$cutted_label" == 'tra' ]
then
label=$(echo $line2 | rev | cut -f2 -d " " | rev)
cutted_label=${label:0:3}
if [ "$cutted_label" == 'acc' ]
then
CHECK_RULE_ACCESS
- elif [ "$cutted_label" == 'exe' ]
+ elif [ "$cutted_label" == 'exe' ]
then
CHECK_RULE_EXECUTE
label=$(echo $line2 | rev | cut -f3 -d " " | rev)
- CHECK_RULE_ACCESS
- fi
+ CHECK_RULE_ACCESS
+ fi
fi
done
}
{
find / -type d 2>/dev/null | while read line # Remove error print
do
- LABEL_CHECK $line
+ LABEL_CHECK $line
done
}
-if [ ! -d $log_dir ]; then
- mkdir $log_dir
-fi
-if [ ! -d $result_dir ]; then
- mkdir $result_dir
-fi
-
if [ -e $result_file ]
then
rm $result_file
echo "SMACK LABEL CHECK STARTED!"
-SMACK_LABEL_CHECK
+SMACK_LABEL_CHECK
if [ ! -e $log_file ]
then
dbpath="/opt/dbspace/.security-manager.db"
result_file=$result_dir"/checksmackrule_loaded.result"
log_file=$log_dir"/checksmackrule_loaded.log"
-exception_file="/opt/share/security-config/test/smack_rule_test/smackrule_exception.list"
+exception_file="/usr/share/security-config/test/smack_rule_test/smackrule_exception.list"
function EXCEPTION_CHECK
{
then
return 1
fi
- done < <(/bin/cat $exception_file )
+ done < <(/bin/cat $exception_file )
return 0
}
if [ "$3" == "rwx" ] || [ "$3" == "rwxat" ] # should be checked
then
return 0
- fi
+ fi
#System::Privileged ~PROCESS~ rwx
#System::Privileged ~PATH_RW~ rwxat
#need to be modified later
if [ "$3" == "rwx" ] || [ "$3" == "rwxat" ] # should be checked
then
return 0
- fi
+ fi
#~PROCESS~ System wx
elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System" ]
- then
+ then
if [ "$3" == "wx" ]
then
return 0
- fi
+ fi
#~PROCESS~ System::Privileged wx
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System::Privileged" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System::Privileged" ]
then
if [ "$3" == "wx" ]
then
return 0
- fi
+ fi
#~PROCESS~ System::Shared rxl
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System::Shared" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System::Shared" ]
then
if [ "$3" == "rxl" ]
then
return 0
- fi
+ fi
#~PROCESS~ System::Run rwxat
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System::Run" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System::Run" ]
then
if [ "$3" == "rwxat" ]
then
return 0
- fi
+ fi
#~PROCESS~ System::Log rwxa
- elif [[ "$1" == "User::Pkg:"* ]] && [ "$2" == "System::Log" ]
+ elif [[ "$1" == "User::Pkg:"* ]] && [ "$2" == "System::Log" ]
then
if [ "$3" == "rwxa" ]
then
return 0
- fi
+ fi
#~PROCESS~ _ l
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "_" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "_" ]
then
if [ "$3" == "l" ]
then
return 0
- fi
+ fi
#User ~PROCESS~ rwx
#need to be checked later
elif [ "$1" == "User" ] && [[ "$2" == "User::Pkg::"* ]] && [[ "$2" != "User::Pkg::"*"::SharedRO" ]] && [[ "$2" != "User::Pkg::"*"::RO" ]]
if [ "$3" == "rwx" ] || [ "$3" == "rwxat" ]
then
return 0
- fi
+ fi
#~PROCESS~ User wx
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "User" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "User" ]
then
if [ "$3" == "wx" ]
then
return 0
- fi
+ fi
#~PROCESS~ User::Home rxl
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "User::Home" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "User::Home" ]
then
if [ "$3" == "rxl" ]
then
return 0
- fi
+ fi
#~PROCESS~ User::App::Shared rwxat
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "User::App::Shared" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "User::App::Shared" ]
then
if [ "$3" == "rwxat" ]
then
return 0
- fi
+ fi
#~PROCESS~ ~PATH_RO~ rxl
- elif [[ "$1" == "User::Pkg::"* ]] && [[ "$2" == "User::Pkg"*"::RO" ]]
+ elif [[ "$1" == "User::Pkg::"* ]] && [[ "$2" == "User::Pkg"*"::RO" ]]
then
if [ "$3" == "rxl" ]
then
return 0
- fi
+ fi
#~PROCESS~ ~PATH_SHARED_RO~ rwxat (self)
elif [[ "$1" == "User::Pkg::"* ]] && [[ "$2" == "$1""::SharedRO" ]]
then
then
return 0
fi
- fi
+ fi
#User ~PATH_TRUSTED~ rwxat
- elif [ "$1" == "User" ] && [[ "$2" == *"::Author::"* ]]
+ elif [ "$1" == "User" ] && [[ "$2" == *"::Author::"* ]]
then
if [ "$3" == "rwxat" ]
then
return 0
fi
#System ~PATH_TRUSTED~ rwxat
- elif [ "$1" == "System" ] && [[ "$2" == *"::Author::"* ]]
+ elif [ "$1" == "System" ] && [[ "$2" == *"::Author::"* ]]
then
if [ "$3" == "rwxat" ]
then
return 0
fi
#System::Privileged ~PATH_TRUSTED~ rwxat
- elif [ "$1" == "System::Privileged" ] && [[ "$2" == *"::Author::"* ]]
+ elif [ "$1" == "System::Privileged" ] && [[ "$2" == *"::Author::"* ]]
then
if [ "$3" == "rwxat" ]
then
then
return 0
fi
- #User ~PATH_SHARED_RO~ rwxat
+ #User ~PATH_SHARED_RO~ rwxat
elif [ "$1" == "User" ] && [[ "$2" == "User::Pkg"*"::SharedRO" ]]
then
if [ "$3" == "rwxat" ]
if [ "$3" == "rwxa" ]
then
return 0
- fi
+ fi
# ^ System::Log rwxa
elif [ "$1" == "^" ] && [[ "$2" == "System::Log" ]]
then
if [ "$3" == "rwxa" ]
then
return 0
- fi
+ fi
# ^ System::Run rwxat
elif [ "$1" == "^" ] && [[ "$2" == "System::Run" ]]
then
if [ "$3" == "rwxat" ]
then
return 0
- fi
+ fi
# _ System wx
elif [ "$1" == "_" ] && [[ "$2" == "System" ]]
then
if [ "$3" == "wx" ]
then
return 0
- fi
+ fi
# _ System::Run rwxat
elif [ "$1" == "_" ] && [[ "$2" == "System::Run" ]]
then
if [ "$3" == "rwxat" ]
then
return 0
- fi
+ fi
# System System::Log rwxa
elif [ "$1" == "System" ] && [[ "$2" == "System::Log" ]]
then
if [ "$3" == "rwxa" ]
then
return 0
- fi
+ fi
# System System::Run rwxat
elif [ "$1" == "System" ] && [[ "$2" == "System::Run" ]]
then
if [ "$3" == "rwxat" ]
then
return 0
- fi
+ fi
# System System::Shared rwxat
elif [ "$1" == "System" ] && [[ "$2" == "System::Shared" ]]
then
if [ "$3" == "rwxat" ]
then
return 0
- fi
+ fi
# System User rwxa
elif [ "$1" == "System" ] && [[ "$2" == "User" ]]
then
if [ "$3" == "rwxa" ]
then
return 0
- fi
+ fi
# System User::Home rwxat
elif [ "$1" == "System" ] && [[ "$2" == "User::Home" ]]
then
if [ "$3" == "rwxat" ]
then
return 0
- fi
+ fi
# System _ rwxa
elif [ "$1" == "System" ] && [[ "$2" == "_" ]]
then
if [ "$3" == "rwxa" ]
then
return 0
- fi
+ fi
# User _ rxl
elif [ "$1" == "User" ] && [[ "$2" == "_" ]]
then
if [ "$3" == "rwl" ]
then
return 0
- fi
+ fi
# User System wx
elif [ "$1" == "User" ] && [[ "$2" == "System" ]]
then
if [ "$3" == "wx" ]
then
return 0
- fi
+ fi
# User System::Run rwxat
elif [ "$1" == "User" ] && [[ "$2" == "System::Run" ]]
then
if [ "$3" == "rwxat" ]
then
return 0
- fi
+ fi
# User System::Log rwxa
elif [ "$1" == "User" ] && [[ "$2" == "System::Log" ]]
then
if [ "$3" == "rwxa" ]
then
return 0
- fi
+ fi
# User System::Shared rxl
elif [ "$1" == "User" ] && [[ "$2" == "System::Shared" ]]
then
if [ "$3" == "rxl" ]
then
return 0
- fi
+ fi
# User User::Home rwxat
elif [ "$1" == "User" ] && [[ "$2" == "User::Home" ]]
then
if [ "$3" == "rwxat" ]
then
return 0
- fi
+ fi
# System::Privileged System rwxat
elif [ "$1" == "System::Privileged" ] && [[ "$2" == "System" ]]
then
if [ "$3" == "rwxa" ]
then
return 0
- fi
+ fi
# _ System::Privileged wx
elif [ "$1" == "_" ] && [[ "$2" == "System::Privileged" ]]
then
if [ "$3" == "rwxat" ]
then
return 0
- fi
+ fi
# ^ System::Privileged rwxa
elif [ "$1" == "^" ] && [[ "$2" == "System::Privileged" ]]
then
if [ "$3" == "rwxa" ]
then
return 0
- fi
+ fi
# System::Privileged User::App::Shared rwxat
elif [ "$1" == "System::Privileged" ] && [ "$2" == "User::App::Shared" ]
then
if [ "$3" == "rwxat" ]
then
return 0
- fi
+ fi
# User::Shell System wx
elif [ "$1" == "User::Shell" ] && [ "$2" == "System" ]
then
if [ "$3" == "wx" ]
then
return 0
- fi
+ fi
# User::Shell,System::Shared,rxl
elif [ "$1" == "User::Shell" ] && [ "$2" == "System::Shared" ]
then
if [ "$3" == "rxl" ]
then
return 0
- fi
+ fi
# User::Shell,System::Run,rxl
elif [ "$1" == "User::Shell" ] && [ "$2" == "System::Run" ]
then
if [ "$3" == "rxl" ]
then
return 0
- fi
+ fi
# User::Shell,System::Log,w
elif [ "$1" == "User::Shell" ] && [ "$2" == "System::Log" ]
then
if [ "$3" == "rwxat" ] && [ "$ishybrid" == "0" ]
then
return 0
- fi
+ fi
fi
EXCEPTION_CHECK $1 $2 $3
function RULE_CHECK_APPLY_PATH
{
- /usr/bin/cat $SMACK_RULE_APPLY_PATH | while read line
+ /usr/bin/cat $SMACK_RULE_APPLY_PATH | while read line
do
subject=$(/bin/echo $line | /usr/bin/cut -f 1 -d " ")
object=$(/bin/echo $line | /usr/bin/cut -f 2 -d " ")
rule=$(/bin/echo $line | /usr/bin/cut -f 3 -d " ")
- RULE_CHECK $subject $object $rule
+ RULE_CHECK $subject $object $rule
done
}
dbpath='/opt/dbspace/.security-manager.db'
result_file=$result_dir"/checksmackrule_saved.result"
log_file=$log_dir"/checksmackrule_saved.log"
-exception_file="/opt/share/security-config/test/smack_rule_test/smackrule_exception_saved.list"
+exception_file="/usr/share/security-config/test/smack_rule_test/smackrule_exception_saved.list"
function EXCEPTION_CHECK
{
then
return 1
fi
- done < <(/bin/cat $exception_file )
+ done < <(/bin/cat $exception_file )
return 0
}
if [ "$3" == "rwx---" ] || [ "$3" == "rwxat-" ] # should be checked
then
return 0
- fi
+ fi
#System::Privileged ~PROCESS~ rwx
#System::Privileged ~PATH_RW~ rwxat
#need to be checked
if [ "$3" == "rwx---" ] || [ "$3" == "rwxat-" ] # should be checked
then
return 0
- fi
+ fi
#~PROCESS~ System wx
elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System" ]
- then
+ then
if [ "$3" == "-wx---" ]
then
return 0
- fi
+ fi
#~PROCESS~ System::Privileged wx
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System::Privileged" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System::Privileged" ]
then
if [ "$3" == "-wx---" ]
then
return 0
- fi
+ fi
#~PROCESS~ System::Shared rxl
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System::Shared" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System::Shared" ]
then
if [ "$3" == "r-x--l" ]
then
return 0
- fi
+ fi
#~PROCESS~ System::Run rwxat
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System::Run" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "System::Run" ]
then
if [ "$3" == "rwxat-" ]
then
return 0
- fi
+ fi
#~PROCESS~ System::Log rwxa
- elif [[ "$1" == "User::Pkg:"* ]] && [ "$2" == "System::Log" ]
+ elif [[ "$1" == "User::Pkg:"* ]] && [ "$2" == "System::Log" ]
then
if [ "$3" == "rwxa--" ]
then
return 0
- fi
+ fi
#~PROCESS~ _ l
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "_" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "_" ]
then
if [ "$3" == "-----l" ]
then
return 0
- fi
+ fi
#User ~PROCESS~ rwx
#need to be checked later
elif [ "$1" == "User" ] && [[ "$2" == "User::Pkg::"* ]] && [[ "$2" != "User::Pkg::"*"::SharedRO" ]] && [[ "$2" != "User::Pkg::"*"::RO" ]]
if [ "$3" == "rwx---" ] || [ "$3" == "rwxat-" ]
then
return 0
- fi
+ fi
#~PROCESS~ User wx
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "User" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "User" ]
then
if [ "$3" == "-wx---" ]
then
return 0
- fi
+ fi
#~PROCESS~ User::Home rxl
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "User::Home" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "User::Home" ]
then
if [ "$3" == "r-x--l" ]
then
return 0
- fi
+ fi
#~PROCESS~ User::App::Shared rwxat
- elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "User::App::Shared" ]
+ elif [[ "$1" == "User::Pkg::"* ]] && [ "$2" == "User::App::Shared" ]
then
if [ "$3" == "rwxat-" ]
then
return 0
- fi
+ fi
#~PROCESS~ ~PATH_RO~ rxl
- elif [[ "$1" == "User::Pkg::"* ]] && [[ "$2" == "User::Pkg"*"::RO" ]]
+ elif [[ "$1" == "User::Pkg::"* ]] && [[ "$2" == "User::Pkg"*"::RO" ]]
then
if [ "$3" == "r-x--l" ]
then
return 0
- fi
+ fi
#~PROCESS~ ~PATH_SHARED_RO~ rwxat (self)
elif [[ "$1" == "User::Pkg::"* ]] && [[ "$2" == "$1""::SharedRO" ]]
then
then
return 0
fi
- fi
+ fi
#User ~PATH_TRUSTED~ rwxat
- elif [ "$1" == "User" ] && [[ "$2" == *"::Author::"* ]]
+ elif [ "$1" == "User" ] && [[ "$2" == *"::Author::"* ]]
then
if [ "$3" == "rwxat-" ]
then
return 0
fi
#System ~PATH_TRUSTED~ rwxat
- elif [ "$1" == "System" ] && [[ "$2" == *"::Author::"* ]]
+ elif [ "$1" == "System" ] && [[ "$2" == *"::Author::"* ]]
then
if [ "$3" == "rwxat-" ]
then
return 0
fi
#System::Privileged ~PATH_TRUSTED~ rwxat
- elif [ "$1" == "System::Privileged" ] && [[ "$2" == *"::Author::"* ]]
+ elif [ "$1" == "System::Privileged" ] && [[ "$2" == *"::Author::"* ]]
then
if [ "$3" == "rwxat-" ]
then
then
return 0
fi
- #User ~PATH_SHARED_RO~ rwxat
+ #User ~PATH_SHARED_RO~ rwxat
elif [ "$1" == "User" ] && [[ "$2" == "User::Pkg"*"::SharedRO" ]]
then
if [ "$3" == "rwxat-" ]
if [ "$3" == "rwxa--" ]
then
return 0
- fi
+ fi
# ^ System::Log rwxa
elif [ "$1" == "^" ] && [[ "$2" == "System::Log" ]]
then
if [ "$3" == "rwxa--" ]
then
return 0
- fi
+ fi
# ^ System::Run rwxat
elif [ "$1" == "^" ] && [[ "$2" == "System::Run" ]]
then
if [ "$3" == "rwxat-" ]
then
return 0
- fi
+ fi
# _ System wx
elif [ "$1" == "_" ] && [[ "$2" == "System" ]]
then
if [ "$3" == "-wx---" ]
then
return 0
- fi
+ fi
# _ System::Run rwxat
elif [ "$1" == "_" ] && [[ "$2" == "System::Run" ]]
then
if [ "$3" == "rwxat-" ]
then
return 0
- fi
+ fi
# System System::Log rwxa
elif [ "$1" == "System" ] && [[ "$2" == "System::Log" ]]
then
if [ "$3" == "rwxa--" ]
then
return 0
- fi
+ fi
# System System::Run rwxat
elif [ "$1" == "System" ] && [[ "$2" == "System::Run" ]]
then
if [ "$3" == "rwxat-" ]
then
return 0
- fi
+ fi
# System System::Shared rwxat
elif [ "$1" == "System" ] && [[ "$2" == "System::Shared" ]]
then
if [ "$3" == "rwxat-" ]
then
return 0
- fi
+ fi
# System User rwxa
elif [ "$1" == "System" ] && [[ "$2" == "User" ]]
then
if [ "$3" == "rwxa--" ]
then
return 0
- fi
+ fi
# System User::Home rwxat
elif [ "$1" == "System" ] && [[ "$2" == "User::Home" ]]
then
if [ "$3" == "rwxat-" ]
then
return 0
- fi
+ fi
# System _ rwxa
elif [ "$1" == "System" ] && [[ "$2" == "_" ]]
then
if [ "$3" == "rwxa--" ]
then
return 0
- fi
+ fi
# User _ rxl
elif [ "$1" == "User" ] && [[ "$2" == "_" ]]
then
if [ "$3" == "rw---l" ]
then
return 0
- fi
+ fi
# User System wx
elif [ "$1" == "User" ] && [[ "$2" == "System" ]]
then
if [ "$3" == "-wx---" ]
then
return 0
- fi
+ fi
# User System::Run rwxat
elif [ "$1" == "User" ] && [[ "$2" == "System::Run" ]]
then
if [ "$3" == "rwxat-" ]
then
return 0
- fi
+ fi
# User System::Log rwxa
elif [ "$1" == "User" ] && [[ "$2" == "System::Log" ]]
then
if [ "$3" == "rwxa--" ]
then
return 0
- fi
+ fi
# User System::Shared rxl
elif [ "$1" == "User" ] && [[ "$2" == "System::Shared" ]]
then
if [ "$3" == "r-x--l" ]
then
return 0
- fi
+ fi
# User User::Home rwxat
elif [ "$1" == "User" ] && [[ "$2" == "User::Home" ]]
then
if [ "$3" == "rwxat-" ]
then
return 0
- fi
+ fi
# System::Privileged System rwxat
elif [ "$1" == "System::Privileged" ] && [[ "$2" == "System" ]]
then
if [ "$3" == "rwxa--" ]
then
return 0
- fi
+ fi
# _ System::Privileged wx
elif [ "$1" == "_" ] && [[ "$2" == "System::Privileged" ]]
then
if [ "$3" == "rwxat-" ]
then
return 0
- fi
+ fi
# ^ System::Privileged rwxa
elif [ "$1" == "^" ] && [[ "$2" == "System::Privileged" ]]
then
if [ "$3" == "rwxa--" ]
then
return 0
- fi
+ fi
# System::Privileged User::App::Shared rwxat
elif [ "$1" == "System::Privileged" ] && [ "$2" == "User::App::Shared" ]
then
if [ "$3" == "rwxat-" ]
then
return 0
- fi
+ fi
# User::Shell System wx
elif [ "$1" == "User::Shell" ] && [ "$2" == "System" ]
then
if [ "$3" == "-wx---" ]
then
return 0
- fi
+ fi
# User::Shell,System::Shared,rxl
elif [ "$1" == "User::Shell" ] && [ "$2" == "System::Shared" ]
then
if [ "$3" == "r-x--l" ]
then
return 0
- fi
+ fi
# User::Shell,System::Run,rxl
elif [ "$1" == "User::Shell" ] && [ "$2" == "System::Run" ]
then
if [ "$3" == "r-x--l" ]
then
return 0
- fi
+ fi
# User::Shell,System::Log,w
elif [ "$1" == "User::Shell" ] && [ "$2" == "System::Log" ]
then
if [ "$3" == "rwxat-" ] && [ "$ishybrid" == "0" ]
then
return 0
- fi
+ fi
fi
EXCEPTION_CHECK $1 $2 $3
function RULE_CHECK_APPLY_PATH
{
- cat $SMACK_RULE_APPLY_PATH1 $SMACK_RULE_APPLY_PATH2 | while read line
+ cat $SMACK_RULE_APPLY_PATH1 $SMACK_RULE_APPLY_PATH2 | while read line
do
subject=$(/bin/echo $line | /usr/bin/cut -f 1 -d " ")
object=$(/bin/echo $line | /usr/bin/cut -f 2 -d " ")
rule=$(/bin/echo $line | /usr/bin/cut -f 3 -d " ")
- RULE_CHECK $subject $object $rule
+ RULE_CHECK $subject $object $rule
done
}
file(GLOB TESTUTILS "${CMAKE_SOURCE_DIR}/test/utils/${ARCH}/*")
INSTALL(FILES
_sh_util_lib
- ${TESTUTILS}
DESTINATION
- /opt/share/security-config/test/utils
+ /usr/share/security-config/test/utils
)
#========================================================
# [Directory and file]
#========================================================
-base_dir="/opt/share/security-config"
-utils_dir="$base_dir/test/utils"
-aslr_script_dir="$base_dir/test/aslr_test/scripts"
-dep_script_dir="$base_dir/test/dep_test/scripts"
-suid_script_dir="$base_dir/test/setuid_test"
-log_dir="$base_dir/log"
-result_dir="$base_dir/result"
+rw_base_dir="/opt/share/security-config"
+ro_base_dir="/usr/share/security-config"
+utils_dir="$ro_base_dir/test/utils"
+aslr_script_dir="$ro_base_dir/test/aslr_test/scripts"
+dep_script_dir="$ro_base_dir/test/dep_test/scripts"
+log_dir="$rw_base_dir/log"
+result_dir="$rw_base_dir/result"
#========================================================
# [Functions]