Modify the permission of token file

- fota is running as system_share user and group.

Change-Id: Ia79cdf471b0e82a0773e8af9f96dab6aa907095c
Signed-off-by: seolheui kim <s414.kim@samsung.com>

diff --git a/packaging/ode.spec b/packaging/ode.spec
index 3fbc762ecd8688a5db8d05a7a0338f731857b969..3ba6cd9dc2436cbd08272a29c5aaa2e458331fdf 100755 (executable)
--- a/packaging/ode.spec
+++ b/packaging/ode.spec
@@ -32,7 +32,7 @@ The ode package provides a daemon which is responsible for encrypting/decryption
 %{_unitdir}/ode.service
 %{_unitdir}/multi-user.target.wants/ode.service
 %attr(700,root,root) %{TZ_SYS_SBIN}/ode-admin-cli
-%attr(700,root,root) %{TZ_SYS_SBIN}/ode-fota
+%attr(750,root,system_share) %{TZ_SYS_SBIN}/ode-fota
 %{_datadir}/%{name}
 %dir %{key_storage_plugin_dir}
 

diff --git a/server/systemd/ode.service.in b/server/systemd/ode.service.in
index 85e19c6a077e7ed13750b3fb9526ab788497f95c..02aca388ff68ed14987772c1a619e8a0b3b0cbb4 100644 (file)
--- a/server/systemd/ode.service.in
+++ b/server/systemd/ode.service.in
@@ -4,6 +4,7 @@ Before=deviced.service
 
 [Service]
 Type=simple
+Group=system_share
 SmackProcessLabel=System::Privileged
 ExecStart=@BIN_DIR@/@PROJECT_NAME@d
 Restart=on-failure

diff --git a/server/upgrade-support.cpp b/server/upgrade-support.cpp
index 11c49b8525757f490fa396e5985c2ac9e3d168e6..35898cf89c6af97a71dd02efbe3a7d3f7bfb97fa 100644 (file)
--- a/server/upgrade-support.cpp
+++ b/server/upgrade-support.cpp
@@ -184,7 +184,7 @@ void writeToken(runtime::File &file, const BinaryData& token)
 {
        size_t tokenSize(token.size());
 
-       file.create(0600);
+       file.create(0640);
 
        file.write(&tokenSize, sizeof(tokenSize));
        file.write(token.data(), token.size());