Modification about smack label of db file belong to process. 81/20681/2 accepted/tizen/common/20140519.225706 accepted/tizen/mobile/20140702.101744 submit/tizen/20140516.071327
authorjooseong.lee <jooseong.lee@samsung.com>
Mon, 12 May 2014 04:08:33 +0000 (13:08 +0900)
committerjooseong lee <jooseong.lee@samsung.com>
Mon, 12 May 2014 04:08:21 +0000 (21:08 -0700)
[Problem]
Most db files have 'floor' label.  Because these are created during image creation time.
Therefore no process can write the dbs (since 'floor' label allows only read and execute)

[Solution]
Modify smack label of the db files based on condition below referring three domain model
Condition1. Assign domain of process which creates db files
Condition2. Assign domain of process accesses db files.

Change-Id: I5b170aeb15543df723d4bc736c4dcb872ff4d7fd
Signed-off-by: jooseong.lee <jooseong.lee@samsung.com>
packaging/calendar-service.manifest

index 017d22d..2d2776b 100644 (file)
@@ -2,4 +2,7 @@
  <request>
     <domain name="_"/>
  </request>
+ <assign>
+    <filesystem path="/opt/usr/dbspace/.calendar-svc.db*" label="User" />
+ </assign>
 </manifest>