spec: Change smack label of resourced-watchdog-handler 81/318581/1 accepted/tizen/unified/20241006.053308 accepted/tizen/unified/x/20241007.013542
authorUnsung <unsung.lee@samsung.com>
Wed, 2 Oct 2024 11:20:01 +0000 (20:20 +0900)
committerUnsung <unsung.lee@samsung.com>
Wed, 2 Oct 2024 11:41:30 +0000 (20:41 +0900)
Change smack label of resourced-watchdog-handler from "System" to
"System::Tools". This is because kernel worker thread requires read
access permission to run resourced-watchdog-handler and "_" has read permission
to "System::Tools".
(Subject label "_" does not have read permission to Object label "System")

Change-Id: I3b7c5f106cc12688c658496742c90fa313a33157
Signed-off-by: Unsung <unsung.lee@samsung.com>
packaging/resourced.spec

index c8c20d3c1bd6f578e1e84ce1c00fa826eb54d83c..1f186898880e01e59c059d8a1812b16b80dc8081 100644 (file)
@@ -156,6 +156,11 @@ mkdir -p %{buildroot}/%{TZ_SYS_GLOBALUSER_DATA}/heart
 mkdir -p %{buildroot}/%{TZ_SYS_GLOBALUSER_DB}
 popd
 
+%if %{?watchdog_module} == ON
+%post watchdog-handler
+chsmack %{_bindir}/resourced-watchdog-handler -a "System::Tools"
+%endif
+
 %post config-tv
 mv %{confdir}/optimizer-profile-tv.conf %{confdir}/optimizer.conf