Fix the manifest/service/spec files regarding 3.0's security policy

Change-Id: I9d38ce34e6af7c4ac30d7630878cd74d56c46008
Signed-off-by: Mu-Woong <muwoong.lee@samsung.com>

diff --git a/packaging/context-service.manifest b/packaging/context-service.manifest
index 2bd561564954bdd9f97a018b07c7c9f53fb77177..97e8c3134908aa65aaf95cec6195b148dff5b49f 100644 (file)
--- a/packaging/context-service.manifest
+++ b/packaging/context-service.manifest
@@ -1,63 +1,5 @@
 <manifest>
-       <define>
-               <domain name="context-service"/>
-               <permit>
-                       <smack permit="dbus" type="rwx"/>
-               </permit>
-               <request>
-                       <smack request="xorg" type="rw"/>
-                       <smack request="security-server::api-cookie-check" type="w"/>
-                       <smack request="security-server::api-app-privilege-by-name" type="rlw"/>
-                       <smack request="security-server::api-permissions" type="rlw"/>
-                       <smack request="vasum::manage" type="rw"/>
-                       <smack request="sys-assert::core" type="rwxat"/>
-                       <smack request="device::app_logging" type="rw"/>
-                       <smack request="device::sys_logging" type="rw"/>
-                       <smack request="deviced::display" type="rw"/>
-                       <smack request="alarm-server::alarm" type="rw"/>
-                       <smack request="libaccounts-svc" type="r"/>
-                       <smack request="libaccounts-svc::db" type="rl"/>
-                       <smack request="libaccounts-svc::check_read" type="r"/>
-                       <smack request="telephony_framework::api_sim" type="r"/>
-                       <smack request="telephony_framework::api_phonebook" type="rx"/>
-                       <smack request="telephony_framework::properties" type="rw"/>
-                       <smack request="connman::get" type="rw"/>
-                       <smack request="connman::set" type="rw"/>
-                       <smack request="connman::profile" type="rw"/>
-                       <smack request="telephony_framework::api_ps_public" type="rw"/>
-                       <smack request="telephony_framework::api_ps_profile" type="rw"/>
-                       <smack request="telephony_framework::api_sms" type="rwx"/>
-                       <smack request="telephony_framework::api_network" type="rwx"/>
-                       <smack request="telephony_framework::api_call" type="rwx"/>
-                       <smack request="privilege::tizen::telephony.admin" type="rw"/>
-                       <smack request="privilege::tizen::telephony" type="rw"/>
-                       <smack request="data-provider-master::notification" type="rwl"/>
-                       <smack request="data-provider-master::notification.client" type="rw"/>
-                       <smack request="aul::launch" type="x"/>
-                       <smack request="privilege::tizen::call" type="rw"/>
-                       <smack request="privilege::tizen::bluetooth" type="rw"/>
-                       <smack request="privilege::tizen::network.get" type="rw"/>
-                       <smack request="privilege::tizen::network.profile" type="rw"/>
-                       <smack request="privilege::tizen::message.read" type="rw"/>
-                       <smack request="msg-service" type="rwx"/>
-                       <smack request="msg-service::db" type="r"/>
-                       <smack request="msg-service::read" type="rw"/>
-                       <smack request="privilege::tizen::message.write" type="rw"/>
-                       <smack request="privilege::tizen::message.read" type="rw"/>
-                       <smack request="msg-service::write" type="rw"/>
-                       <smack request="msg-service::read" type="rw"/>
-                       <smack request="app-svc::jump" type="x"/>
-                       <smack request="tizen::vconf::message" type="r"/>
-                       <smack request="tizen::vconf::setting::admin" type="rl"/>
-                       <smack request="tizen::vconf::volume::set" type="rl"/>
-                       <smack request="sound_server" type="rlwx"/>
-                       <smack request="media-data::db" type="rlw"/>
-               </request>
-       </define>
        <request>
-               <domain name="context-service"/>
+               <domain name="_"/>
        </request>
-       <assign>
-               <filesystem path="/usr/bin/contextd" exec_label="context-service" label="context-service"/>
-       </assign>
 </manifest>

diff --git a/packaging/context-service.service b/packaging/context-service.service
index d8f8a218ae7159628e7b9ec4a317633d3ff91e87..5b5a8455baf11ef666ee6f01c0e0508cd3eefa29 100644 (file)
--- a/packaging/context-service.service
+++ b/packaging/context-service.service
@@ -5,7 +5,6 @@ Description=Contextual Service Framework Daemon
 Type=dbus
 User=system
 Group=system
-SmackProcessLabel=context-service
 BusName=org.tizen.context
 ExecStart=/usr/bin/contextd
 Restart=always

diff --git a/packaging/context-service.spec b/packaging/context-service.spec
index 5508ac7f06b160abf302a37f1ddaa706290ed15b..e054daad28e56972752cf8e7d568e540fbdf2636 100644 (file)
--- a/packaging/context-service.spec
+++ b/packaging/context-service.spec
@@ -82,8 +82,8 @@ sqlite3 %{buildroot}/opt/dbspace/.context-service.db "CREATE TABLE VERSION (VERS
 sqlite3 %{buildroot}/opt/dbspace/.context-service.db "INSERT INTO VERSION VALUES ('%{version}');"
 install -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}
 cp LICENSE %{buildroot}%{_datadir}/license/%{name}
-sed -i "s/^\tversion=\".*\"/\tversion=\"%{version}\"/g" packaging/context-service.xml
-cp packaging/context-service.xml %{buildroot}%{_datadir}/packages/
+#sed -i "s/^\tversion=\".*\"/\tversion=\"%{version}\"/g" packaging/context-service.xml
+#cp packaging/context-service.xml %{buildroot}%{_datadir}/packages/
 cp data/access-config.xml %{buildroot}/opt/data/context-service/
 cp data/trigger-template.json %{buildroot}/opt/data/context-service/
 sh data/template-json-to-sql.sh data/trigger-template.json > %{buildroot}/opt/data/context-service/trigger-template.sql
@@ -93,7 +93,7 @@ install -m 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/dbus-1/system.d/
 
 %post
 sqlite3 -echo /opt/dbspace/.context-service.db < /opt/data/context-service/trigger-template.sql
-chsmack -a "context-service" /opt/dbspace/.context-service.db*
+#chsmack -a "context-service" /opt/dbspace/.context-service.db*
 mkdir -p %{_unitdir}/graphical.target.wants
 ln -s ../context-service.service %{_unitdir}/graphical.target.wants/
 /sbin/ldconfig
@@ -112,11 +112,11 @@ systemctl daemon-reload
 %files
 %manifest packaging/%{name}.manifest
 %config %{_sysconfdir}/dbus-1/system.d/*
-%defattr(-,root,root,-)
+#%defattr(-,root,root,-)
 %{_bindir}/*
 %{_unitdir}/context-service.service
 %{_datadir}/license/%{name}
-%{_datadir}/packages/*.xml
+#%{_datadir}/packages/*.xml
 %defattr(0600,system,system,-)
 /opt/data/context-service/*
 %config(noreplace) /opt/dbspace/.context-service.db*