Add missing rules for signal delivery

Recent changes to kernel code and configuration changed Smack behavior
for access check on kill(). The sending process now needs "A" access
instead of "W".

Permit "System" and "System::Privileged" labeled processes to send signals
to "User" and "_" labeled processes.

Change-Id: Ie8a46fae4154f1b08ff9c2e9294cb81338f25c55
Signed-off-by: Rafal Krypa <r.krypa@samsung.com>

diff --git a/packaging/default-ac-domains.manifest b/packaging/default-ac-domains.manifest
index afa2a34b4f92b8f370984c95895c366541eaf97d..cb786a1b583384a4d391a0483ebbd7ded0b656ca 100644 (file)
--- a/packaging/default-ac-domains.manifest
+++ b/packaging/default-ac-domains.manifest
@@ -12,7 +12,7 @@
       <smack request="System::Log" type="rwxa"/>
       <smack request="User::Home" type="rwxat"/>
       <smack request="User::App::Shared" type="rwxat"/>
-      <smack request="_" type="rwx"/>
+      <smack request="_" type="rwxa"/>
     </request>
     <permit>
       <smack permit="_" type="wx"/>
@@ -28,7 +28,7 @@
       <smack request="System::Log" type="rwxa"/>
       <smack request="User::Home" type="rwxat"/>
       <smack request="User::App::Shared" type="rwxat"/>
-      <smack request="_" type="rwx"/>
+      <smack request="_" type="rwxa"/>
     </request>
     <permit>
       <smack permit="_" type="wx"/>
@@ -64,8 +64,8 @@
       <smack request="User::App::Shared" type="rwxat"/>
     </request>
     <permit>
-      <smack permit="System" type="rwx"/>
-      <smack permit="System::Privileged" type="rwx"/>
+      <smack permit="System" type="rwxa"/>
+      <smack permit="System::Privileged" type="rwxa"/>
     </permit>
   </define>
   <define>