Adding ^ domain, System::Run label and respective rules

Change-Id: I102bbd93200e1b0c59d2084823e2823a81e83a19

diff --git a/packaging/default-ac-domains.manifest b/packaging/default-ac-domains.manifest
index 3dd15e76db82959a0596c4172a87f42c857f5960..cdaf782cb7cec8137435cbe95581b19bca4bb33c 100644 (file)
--- a/packaging/default-ac-domains.manifest
+++ b/packaging/default-ac-domains.manifest
@@ -3,19 +3,36 @@
     <domain name="System"/>
     <provide>
       <label name="System::Shared"/>
+      <label name="System::Run"/>
     </provide>
     <request>
       <smack request="System::Shared" type="rwxat"/>
+      <smack request="System::Run" type="rwxat"/>
     </request>
+    <permit>
+      <smack permit="_" type="wx"/>
+      <smack permit="_" to="System::Run" type="rwxat"/>
+    </permit>
+  </define>
+  <define>
+    <domain name="^"/>
+    <request>
+      <smack request="System" type="rwxa"/>
+      <smack request="System::Run" type="rwxat"/>
+    </request>
+    <permit>
+      <smack permit="System" type="rwxa"/>
+    </permit>
   </define>
   <define>
     <domain name="User"/>
     <request>
-      <smack request="System" type="w"/>
+      <smack request="System" type="wx"/>
       <smack request="System::Shared" type="rx"/>
+      <smack request="System::Run" type="rwxat"/>
     </request>
     <permit>
-      <smack permit="System" type="w"/>
+      <smack permit="System" type="rwx"/>
     </permit>
   </define>
   <request>