dbus: fix dbus policy with default deny rule

Change-Id: I1ea398b9843a2ea7340823ba938510995d12a902
Signed-off-by: wansuyoo <wansu.yoo@samsung.com>

diff --git a/packaging/org.tizen.orchestration.conf b/packaging/org.tizen.orchestration.conf
index b9405d7..6c8fd06 100755 (executable)
--- a/packaging/org.tizen.orchestration.conf
+++ b/packaging/org.tizen.orchestration.conf
@@ -5,12 +5,19 @@
 <busconfig>
        <policy user="root">
                <allow own="org.tizen.orchestration"/>
+               <allow send_destination="org.tizen.orchestration"/>
        </policy>
-       <policy context="default">
+       <policy user="app_fw">
                <allow own="org.tizen.orchestration"/>
                <allow send_destination="org.tizen.orchestration"/>
-               <allow send_interface="org.tizen.orchestration.agent"/>
+       </policy>
+       <policy group="users">
                <check send_destination="org.tizen.orchestration" send_interface="org.tizen.orchestration.agent"
                        send_member="request_service" privilege="http://tizen.org/privilege/appmanager.launch"/>
        </policy>
+       <policy context="default">
+               <deny own="org.tizen.orchestration"/>
+               <deny send_destination="org.tizen.orchestration"/>
+               <allow send_destination="org.tizen.orchestration" send_interface="org.tizen.orchestration.agent"/>
+       </policy>
 </busconfig>

diff --git a/packaging/org.tizen.orchestration.conf.amd64 b/packaging/org.tizen.orchestration.conf.amd64
index 38507ca..7d8518d 100755 (executable)
--- a/packaging/org.tizen.orchestration.conf.amd64
+++ b/packaging/org.tizen.orchestration.conf.amd64
@@ -3,12 +3,17 @@
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
 
 <busconfig>
-    <policy user="root">
-        <allow own="org.tizen.orchestration"/>
-    </policy>
-    <policy context="default">
-        <allow own="org.tizen.orchestration"/>
-        <allow send_destination="org.tizen.orchestration"/>
-        <allow send_interface="org.tizen.orchestration.agent"/>
-    </policy>
-</busconfig>
\ No newline at end of file
+       <policy user="root">
+               <allow own="org.tizen.orchestration"/>
+               <allow send_destination="org.tizen.orchestration"/>
+       </policy>
+       <policy user="app_fw">
+               <allow own="org.tizen.orchestration"/>
+               <allow send_destination="org.tizen.orchestration"/>
+       </policy>
+       <policy context="default">
+               <deny own="org.tizen.orchestration"/>
+               <deny send_destination="org.tizen.orchestration"/>
+               <allow send_destination="org.tizen.orchestration" send_interface="org.tizen.orchestration.agent"/>
+       </policy>
+</busconfig>