Deny an access to memory D-Bus interface without privilege

Change-Id: I774d27179a68042a0de9f59420fab6bc55287e83
Signed-off-by: Kichan Kwon <k_c.kwon@samsung.com>

diff --git a/packaging/resourced-headless.conf b/packaging/resourced-headless.conf
index b1776b33093253e7ca649d8cf6613a4e4b0ba0b7..b0187d62e8367e5be8055ba577725ade1fe8a986 100644 (file)
--- a/packaging/resourced-headless.conf
+++ b/packaging/resourced-headless.conf
@@ -12,8 +12,11 @@
 
     <policy context="default">
         <deny send_destination="org.tizen.resourced"/>
-               <check send_destination="org.tizen.resourced"
-                       send_interface="org.tizen.resourced.process"
-                       privilege="http://tizen.org/privilege/systemmonitor"/>
+        <check send_destination="org.tizen.resourced"
+            send_interface="org.tizen.resourced.process"
+            privilege="http://tizen.org/privilege/systemmonitor"/>
+        <check send_destination="org.tizen.resourced"
+            send_interface="org.tizen.resourced.oom"
+            privilege="http://tizen.org/privilege/systemsettings.admin"/>
     </policy>
 </busconfig>