Modification about smack label of db file belong to process. 64/20664/2 accepted/tizen/common/20140519.230004 accepted/tizen/mobile/20140602.132346 submit/tizen/20140516.060646 submit/tizen_common/20140521.163740 submit/tizen_common/20140522.130648 submit/tizen_common/20140522.135644
authorjooseong.lee <jooseong.lee@samsung.com>
Mon, 12 May 2014 01:00:13 +0000 (10:00 +0900)
committerjooseong lee <jooseong.lee@samsung.com>
Mon, 12 May 2014 01:00:08 +0000 (18:00 -0700)
[Problem]
Most db files have 'floor' label.  Because these are created during image creation time.
Therefore no process can write the dbs (since 'floor' label allows only read and execute)

[Solution]
Modify smack label of the db files based on condition below referring three domain model
Condition1. Assign domain of process which creates db files
Condition2. Assign domain of process accesses db files.

Change-Id: Ia3644149c6fd7efa53eeaa33c033c3cad42d1d01
Signed-off-by: jooseong.lee <jooseong.lee@samsung.com>
packaging/app-svc.manifest

index 017d22d..0572f7f 100644 (file)
@@ -2,4 +2,7 @@
  <request>
     <domain name="_"/>
  </request>
+ <assign>
+    <filesystem path="/opt/dbspace/.appsvc.db*" label="User" />
+ </assign>
 </manifest>