Modification about smack label of db file belong to process. 75/20575/2 tizen
authorjooseong.lee <jooseong.lee@samsung.com>
Fri, 9 May 2014 09:25:40 +0000 (18:25 +0900)
committerjooseong lee <jooseong.lee@samsung.com>
Fri, 9 May 2014 09:25:33 +0000 (02:25 -0700)
[Problem]
Most db files have 'floor' label.  Because these are created during image creation time.
Therefore no process can write the dbs (since 'floor' label allows only read and execute)

[Solution]
Modify smack label of the db files based on condition below referring three domain model
Condition1. Assign domain of process which creates db files
Condition2. Assign domain of process accesses db files.

Change-Id: Ib81e8c1f09aa869d49e431296e57f36c36db63dd
Signed-off-by: jooseong.lee <jooseong.lee@samsung.com>
oma-dm-agent.manifest

index a76fdba..583e16b 100755 (executable)
@@ -2,4 +2,9 @@
        <request>
                <domain name="_" />
        </request>
+       <assign>
+               <filesystem path="/opt/usr/dbspace/.dm_service.db*" label="System" />
+               <filesystem path="/opt/usr/dbspace/.momanager.db*" label="System" />
+               <filesystem path="/opt/usr/dbspace/.omadmagent.db*" label="System" />
+       </assign>
 </manifest>