Run systemd unit tests for common profile also. 92/224192/1 accepted/tizen/unified/20200210.131817 submit/tizen/20200207.093609
authorjin-gyu.kim <jin-gyu.kim@samsung.com>
Fri, 7 Feb 2020 04:53:10 +0000 (13:53 +0900)
committerjin-gyu.kim <jin-gyu.kim@samsung.com>
Fri, 7 Feb 2020 04:53:12 +0000 (13:53 +0900)
- For common profile, use the same list in mobile profile.
- It will not disable systemd unit, just for checking the status.
- Failed lists will be disabled later.

Change-Id: Ia0c9a1a07092e3dbc23c1a88fa8ba82008389d64

packaging/security-config.spec
test/capability_test/CMakeLists.txt
test/new_service_test/emulator/common/dbus_service.list [new file with mode: 0644]
test/new_service_test/emulator/common/system_socket.list [new file with mode: 0644]
test/new_service_test/emulator/common/systemd_service.list [new file with mode: 0755]
test/new_service_test/target/common/dbus_service.list [new file with mode: 0644]
test/new_service_test/target/common/system_socket.list [new file with mode: 0644]
test/new_service_test/target/common/systemd_service.list [new file with mode: 0644]

index 01d26e6f3defe110ffcc24f4fc225e4396a8c3f5..75c3634edd01d0b5ca835cceb4f8090c20e80f4d 100755 (executable)
@@ -78,12 +78,11 @@ rm -r /opt/share/security-config/test
 ln -s %{SECURITY_TEST_DIR} /opt/share/security-config/test
 touch /opt/share/security-config/dummy_file
 chmod 600 /opt/share/security-config/dummy_file
+mv %{SECURITY_TEST_DIR}/new_service_test/list/common/* %{SECURITY_TEST_DIR}/new_service_test/
+rm -rf %{SECURITY_TEST_DIR}/new_service_test/list/
 
 %post profile_mobile
-mv %{SECURITY_TEST_DIR}/capability_test/mobile/* %{SECURITY_TEST_DIR}/capability_test/
 mv %{SECURITY_TEST_DIR}/new_service_test/list/mobile/* %{SECURITY_TEST_DIR}/new_service_test/
-rm -rf %{SECURITY_TEST_DIR}/capability_test/mobile/
-rm -rf %{SECURITY_TEST_DIR}/capability_test/wearable/
 rm -rf %{SECURITY_TEST_DIR}/new_service_test/list/
 rm -f /opt/share/askuser_disable
 chsmack -a "System::NoUse" /etc/smack/onlycap
@@ -91,10 +90,7 @@ mv /usr/share/security-config/mount_list/mobile/additional_mount_list /usr/share
 rm -r /usr/share/security-config/mount_list/
 
 %post profile_wearable
-mv %{SECURITY_TEST_DIR}/capability_test/wearable/* %{SECURITY_TEST_DIR}/capability_test/
 mv %{SECURITY_TEST_DIR}/new_service_test/list/wearable/* %{SECURITY_TEST_DIR}/new_service_test/
-rm -rf %{SECURITY_TEST_DIR}/capability_test/mobile/
-rm -rf %{SECURITY_TEST_DIR}/capability_test/wearable/
 rm -rf %{SECURITY_TEST_DIR}/new_service_test/list/
 rm -f /opt/share/askuser_disable
 chsmack -a "System::NoUse" /etc/smack/onlycap
@@ -129,6 +125,7 @@ rm -r /usr/share/security-config/mount_list/
 %attr(755,root,root) %{SECURITY_TEST_DIR}/relro_stack_canary_test/*
 %attr(755,root,root) %{SECURITY_TEST_DIR}/setuid_test/*
 %attr(755,root,root) %{SECURITY_TEST_DIR}/execute_label_check_test/*
+%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/*
 %attr(755,root,root) /usr/share/upgrade/scripts/201.security_upgrade.sh
 %attr(755,root,root) %{_sysconfdir}/gumd/useradd.d/90_user-content-permissions.post
 %attr(755,root,root) %{_sysconfdir}/gumd/useradd.d/91_user-dbspace-permissions.post
@@ -140,8 +137,6 @@ rm -r /usr/share/security-config/mount_list/
 %attr(-,root,root) %{_unitdir}/multi-user.target.wants/security-config.service
 %attr(755,root,root) /usr/share/security-config/smack_default_labeling
 %attr(644,root,root) /etc/smack/onlycap
-%attr(755,root,root) %{SECURITY_TEST_DIR}/capability_test/mobile/*
-%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/*
 %attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/list/mobile/*
 %attr(644,root,root) /usr/share/security-config/mount_list/mobile/*
 
@@ -151,13 +146,10 @@ rm -r /usr/share/security-config/mount_list/
 %attr(-,root,root) %{_unitdir}/multi-user.target.wants/security-config.service
 %attr(755,root,root) /usr/share/security-config/smack_default_labeling
 %attr(644,root,root) /etc/smack/onlycap
-%attr(755,root,root) %{SECURITY_TEST_DIR}/capability_test/wearable/*
-%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/*
 %attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/list/wearable/*
 %attr(644,root,root) /usr/share/security-config/mount_list/wearable/*
 
 %files profile_tv
 %license LICENSE
-%attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/*
 %attr(755,root,root) %{SECURITY_TEST_DIR}/new_service_test/list/tv/*
 %attr(644,root,root) /usr/share/security-config/mount_list/tv/*
index 682aba06e9938043df683048d4e44b32f9fab362..2a1c079a886399b0e672211666f75ecbcd447d07 100755 (executable)
@@ -8,11 +8,6 @@ INSTALL(FILES
        ${SHELL_SCRIPT}
        ${CHECK_NEW_CAPABILITITES_EXCEPTION_LIST}
        DESTINATION
-       /usr/share/security-config/test/capability_test/wearable
-)
-INSTALL(FILES
-       ${SHELL_SCRIPT}
-       ${CHECK_NEW_CAPABILITITES_EXCEPTION_LIST}
-       DESTINATION
-       /usr/share/security-config/test/capability_test/mobile
+       /usr/share/security-config/test/capability_test/
 )
+
diff --git a/test/new_service_test/emulator/common/dbus_service.list b/test/new_service_test/emulator/common/dbus_service.list
new file mode 100644 (file)
index 0000000..e69de29
diff --git a/test/new_service_test/emulator/common/system_socket.list b/test/new_service_test/emulator/common/system_socket.list
new file mode 100644 (file)
index 0000000..ae6e32c
--- /dev/null
@@ -0,0 +1,48 @@
+;sdbd_tcp.socket;;;;*;@;
+;connman.socket;;;;*;@;
+;systemd-udevd-kernel.socket;;;;;;
+;device-certificate-manager.socket;;;0777;*;@;
+;nfc-manager.socket;;;0777;*;@;
+;cynara-admin.socket;;;0700;@;@;
+;auth-fw-passwd-reset.socket;security_fw;security_fw;0777;*;@;
+;central-key-manager-api-ocsp.socket;;;0777;*;@;
+;msg-server.socket;messaging;messaging;;;;
+;buxton2.socket;;;0777;*;@;
+;device-policy-manager.socket;security_fw;security_fw;0777;*;@;
+;ac.socket;;;0777;;;
+;csr-cs.socket;;;0777;*;@;
+;auth-fw-passwd-check.socket;security_fw;security_fw;0777;*;@;
+;systemd-journald-audit.socket;;;;;;
+;tef-simulator-debugproxy.socket;sdk;security_fw;0660;System::TEF;@;
+;browser-provider.socket;;;0777;;;
+;auth-fw-passwd-policy.socket;security_fw;security_fw;0777;*;@;
+;systemd-udevd-control.socket;;;0600;;;
+;download-provider.socket;;;0777;;;
+;cert-server.socket;security_fw;security_fw;0777;;;
+;ode.socket;;;;*;@;
+;csr-admin.socket;;;0777;*;@;
+;swap_manager.socket;owner;users;;*;@;
+;syslog.socket;;;0666;;;
+;security-manager.socket;;;0777;*;@;
+;tef-simulator.socket;;priv_tee_client;0060;System;@;
+;tef-simulator.socket;;;0770;*;@;
+;systemd-journald-dev-log.socket;;;0666;;;
+;audit-trail.socket;security_fw;security_fw;0755;*;@;
+;auth-fw-passwd-set.socket;security_fw;security_fw;0777;*;@;
+;central-key-manager-api-encryption.socket;;;0777;*;@;
+;sdbd.socket;;;;;;
+;csr-wp.socket;;;0777;*;@;
+;cynara.socket;;;0777;*;@;
+;mediacontroller.socket;multimedia_fw;multimedia_fw;;;;
+;central-key-manager-api-control.socket;;;0777;*;@;
+;usb-host-test.socket;;;;;;
+;systemd-journald.socket;;;0666;;;
+;privacy-guard-server.socket;security_fw;security_fw;0777;;;
+;cynara-monitor-get.socket;;security_fw;0060;@;@;
+;dbus.socket;;;;*;@;
+;cynara-agent.socket;;security_fw;0060;*;@;
+;central-key-manager-api-storage.socket;;;0777;*;@;
+;sensord.socket;sensor;input;0777;*;@;
+;systemd-initctl.socket;;;0600;;;
+;cert-checker.socket;security_fw;security_fw;0777;;;
+
diff --git a/test/new_service_test/emulator/common/systemd_service.list b/test/new_service_test/emulator/common/systemd_service.list
new file mode 100755 (executable)
index 0000000..32a2c9d
--- /dev/null
@@ -0,0 +1,192 @@
+;ac.service;app_fw;app_fw;System;
+;accounts-service.service;service_fw;service_fw;System;
+;actd.service;root;root;System;
+;alarm-server.service;app_fw;app_fw;System;
+;app2sd-server.service;root;root;System;
+;asp-manager.service;network_fw;network_fw;System;
+;audit-trail.service;security_fw;security_fw;System;
+;auth-fw.service;security_fw;security_fw;System;
+;bluetooth-address.service;network_fw;network_fw;System;
+;bluetooth-force-hci-logger.service;network_fw;network_fw;System;
+;bluetooth-frwk.service;network_fw;network_fw;System;
+;bluetooth-frwk-core.service;network_fw;network_fw;System;
+;bluetooth-hci-down.service;network_fw;network_fw;System;
+;bluetooth-hci-dump@.service;network_fw;network_fw;System;
+;bluetooth-hci-logger.service;network_fw;network_fw;System;
+;bluetooth-hci-logger-stop.service;network_fw;network_fw;System;
+;bluetooth-hci-up.service;network_fw;network_fw;System;
+;bluetooth-map-agent.service;network_fw;network_fw;System;
+;bluetooth-pbap-agent.service;network_fw;network_fw;System;
+;bluetooth-share.service;network_fw;network_fw;System;
+;bluetooth-share-start.service;network_fw;network_fw;System;
+;bluetooth-stack-down.service;root;root;System;
+;bluetooth-stack-down-with-radio.service;network_fw;network_fw;System;
+;bluetooth-stack-up.service;network_fw;network_fw;System;
+;bluez-start.service;network_fw;network_fw;System;
+;booting-done.service;system_fw;system_fw;System;
+;boot-animation.service;application;application;System;
+;browser-provider.service;web_fw;web_fw;System;
+;buxton2.service;buxton;buxton;System;
+;callmgr.service;telephony;telephony;System;
+;capi-ui-sticker.service;ui_fw;ui_fw;System;
+;capmgr.service;app_fw;app_fw;System;
+;central-key-manager.service;key-manager;security_fw;System;
+;cert-checker.service;security_fw;security_fw;System;
+;cert-server.service;security_fw;security_fw;System;
+;chromium-efl.service;root;root;System::Privileged;
+;chromium-efl-install.service;web_fw;web_fw;System;
+;chromium-efl-update.service;root;root;System::Privileged;
+;connman-vpn.service;network_fw;network_fw;System;
+;connman.service;network_fw;network_fw;System;
+;console-getty.service;root;root;System;
+;console-shell.service;root;root;System;
+;container-getty@.service;root;root;System;
+;contextd.service;service_fw;service_fw;System;
+;crash-service.service;crash_worker;crash_worker;System;
+;csr.service;security_fw;security_fw;System;
+;cynara.service;cynara;cynara;System;
+;data-provider-master.service;app_fw;app_fw;System;
+;dbus.service;dbus;dbus;System;
+;debug-shell.service;root;root;System;
+;device-certificate-manager.service;security_fw;security_fw;System;
+;device-policy-manager.service;security_fw;security_fw;System;
+;device-policy-syspopup.service;security_fw;security_fw;System;
+;deviced.service;root;root;System::Privileged;
+;display-manager.service;root;root;System;
+;display-manager-monitor.service;graphic_fw;graphic_fw;System;
+;dlog_cleanup.service;log;log;System;
+;dlog_logger.service;log;log;System;
+;download-provider.service;web_fw;web_fw;System;
+;dummyasm.service;service_fw;service_fw;System;
+;edge-orchestration.service;system_fw;system_fw;System;
+;emergency.service;root;root;System;
+;emuld.service;root;root;System::Privileged;
+;emul-common-preinit.service;service_fw;service_fw;System;
+;emul-setup-audio-volume.service;service_fw;service_fw;System;
+;esd.service;app_fw;app_fw;System;
+;faultd.service;root;root;System;
+;feedbackd.service;system_fw;system_fw;System;
+;fido.service;service_fw;service_fw;System;
+;fido-asm.service;service_fw;service_fw;System;
+;fido-bt-roaming-agent.service;service_fw;service_fw;System;
+;focus-server.service;multimedia_fw;multimedia_fw;System;
+;getty@.service;root;root;User::Shell;
+;gumd.service;root;root;System::Privileged;
+;gumd.service;root;root;System;
+;init-update.service;root;root;System::Privileged;
+;initrd-cleanup.service;root;root;System;
+;initrd-parse-etc.service;root;root;System;
+;initrd-switch-root.service;root;root;System;
+;initrd-udevadm-cleanup-db.service;root;root;System;
+;inm-manager.service;network_fw;network_fw;System;
+;kmod-static-nodes.service;root;root;System;
+;krate.service;root;root;System;
+;lbs-server.service;location;location;System;
+;ldconfig.service;root;root;System;
+;license-manager-agent.service;security_fw;security_fw;System;
+;log_dump.service;root;root;System;
+;log_dump.service;system_fw;system_fw;System; # conditionaly used
+;mdgd.service;network_fw;network_fw;System;
+;media-server.service;multimedia_fw;multimedia_fw;System;
+;mediacontroller.service;multimedia_fw;multimedia_fw;System;
+;mm-resource-managerd.service;multimedia_fw;multimedia_fw;System;
+;mobileap-agent.service;network_fw;network_fw;System;
+;msg-server.service;messaging;messaging;System;
+;murphyd.service;multimedia_fw;multimedia_fw;System;
+;muse-server.service;multimedia_fw;multimedia_fw;System;
+;net-config.service;network_fw;network_fw;System;
+;nether.service;security_fw;security_fw;System;
+;nfc-manager.service;network_fw;network_fw;System;
+;ode.service;root;root;System::Privileged;
+;ode-progress-ui@.service;application;application;System;
+;offline-update.service;root;root;System::Privileged;
+;opt-usr-fsck.service;system_fw;disk;System;
+;package-manager.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System;
+;pass.service;system_fw;system_fw;System;
+;phonenumber-utils.service;service_fw;service_fw;System;
+;pkg-db-recovery.service;root;root;System;
+;pkgdir-tool.service;app_fw;app_fw;System;
+;privacy-guard-server.service;security_fw;security_fw;System;
+;pulseaudio.service;root;root;System;
+;pushd.service;service_fw;service_fw;System;
+;quotaon.service;root;root;System;
+;rescue.service;root;root;System;
+;resize2fs@.service;root;root;System;
+;resourced.service;root;root;System;
+;rndis.service;network_fw;network_fw;System;
+;sdbd.service;sdk;sdk;System;
+;sdbd_tcp.service;sdk;sdk;System;
+;security-config.service;root;root;System::Privileged;
+;security-manager-cleanup.service;root;root;System::Privileged;
+;security-manager-rules-loader.service;root;root;System::Privileged;
+;security-manager.service;root;root;System::Privileged;
+;sensord.service;sensor;input;System;
+;serial-getty@.service;root;root;User::Shell;
+;shutdown-animation.service;application;application;System;
+;sound-server.service;multimedia_fw;multimedia_fw;System;
+;stability-monitor.service;stability_monitor;stability_monitor;System;
+;stc-iptables.service;network_fw;network_fw;System;
+;stc-manager.service;root;root;System;
+;storaged.service;root;root;System::Privileged;
+;swap_manager.service;system_fw;system_fw;System;
+;sys-kernel-tracing.service;system_fw;system_fw;System;
+;system-default-target-done.service;system_fw;system_fw;System;
+;system-delayed-target-done.service;system_fw;system_fw;System;
+;system-delayed-target-trigger.service;root;root;System;
+;system-popup.service;system_fw;system_fw;System;
+;systemd-ask-password-console.service;root;root;System;
+;systemd-ask-password-wall.service;root;root;System;
+;systemd-binfmt.service;root;root;System;
+;systemd-exit.service;root;root;System;
+;systemd-fsck-root.service;root;root;System;
+;systemd-fsck@.service;root;root;System;
+;systemd-halt.service;root;root;System;
+;systemd-hibernate-resume@.service;root;root;System;
+;systemd-hibernate.service;root;root;System;
+;systemd-hwdb-update.service;root;root;System;
+;systemd-hybrid-sleep.service;root;root;System;
+;systemd-initctl.service;root;root;System;
+;systemd-journal-catalog-update.service;root;root;System;
+;systemd-journal-flush.service;root;root;System;
+;systemd-journald.service;root;root;System;
+;systemd-kexec.service;root;root;System;
+;systemd-localed.service;root;root;System;
+;systemd-logind.service;root;root;System::Privileged;
+;systemd-machine-id-commit.service;root;root;System;
+;systemd-modules-load.service;root;root;System;
+;systemd-nspawn@.service;root;root;System;
+;systemd-poweroff.service;root;root;System;
+;systemd-quotacheck.service;root;root;System;
+;systemd-reboot.service;root;root;System;
+;systemd-remount-fs.service;root;root;System;
+;systemd-suspend.service;root;root;System;
+;systemd-sysctl.service;root;root;System;
+;systemd-tmpfiles-setup-dev.service;root;root;System::Privileged;
+;systemd-tmpfiles-setup.service;root;root;System::Privileged;
+;systemd-udev-settle.service;root;root;System;
+;systemd-udev-trigger.service;root;root;System;
+;systemd-udevd.service;root;root;System::Privileged;
+;systemd-update-done.service;root;root;System;
+;systemd-update-utmp-runlevel.service;root;root;System;
+;systemd-update-utmp.service;root;root;System;
+;systemd-user-sessions.service;root;root;System;
+;systemd-vconsole-setup.service;root;root;System;
+;tef-simulator.service;security_fw;security_fw;System::TEF;
+;telephony-daemon.service;telephony;telephony;System;
+;tizen-system-env.service;root;root;System;
+;tizenid.service;system_fw;system_fw;System;
+;tlm.service;root;root;User;
+;ttrace-marker.service;system_fw;system_fw;System;
+;ua-manager.service;network_fw;network_fw;System;
+;udev-sdb-init.service;root;root;System;
+;usb-host-ffs-test-daemon.service;system_fw;system_fw;System;
+;user@.service;%i;users;User;
+;__user@.service;%i;;User;
+;vmodem-x86.service;root;root;System::Privileged;
+;wait-mount@.service;system_fw;system_fw;System;
+;wait-mount@opt-usr.service;system_fw;system_fw;System;
+;webappenc-initializer.service;security_fw;security_fw;System;
+;wifi-direct-manager.service;network_fw;network_fw;System;
+;wmeshd.service;network_fw;network_fw;System;
+;zigbee-daemon.service;network_fw;network_fw;System;
diff --git a/test/new_service_test/target/common/dbus_service.list b/test/new_service_test/target/common/dbus_service.list
new file mode 100644 (file)
index 0000000..e69de29
diff --git a/test/new_service_test/target/common/system_socket.list b/test/new_service_test/target/common/system_socket.list
new file mode 100644 (file)
index 0000000..ee09e63
--- /dev/null
@@ -0,0 +1,45 @@
+;ac.socket;;;0777;;;
+;central-key-manager-api-control.socket;;;0777;*;@;
+;systemd-journald-audit.socket;;;;;;
+;systemd-udevd-control.socket;;;0600;;;
+;systemd-udevd-kernel.socket;;;;;;
+;systemd-initctl.socket;;;0600;;;
+;cynara-monitor-get.socket;;security_fw;0060;@;@;
+;cynara.socket;;;0777;*;@;
+;audit-trail.socket;security_fw;security_fw;0755;*;@;
+;central-key-manager-api-ocsp.socket;;;0777;*;@;
+;usb-host-test.socket;;;;;;
+;download-provider.socket;;;0777;;;
+;browser-provider.socket;;;0777;;;
+;central-key-manager-api-encryption.socket;;;0777;*;@;
+;auth-fw-passwd-policy.socket;security_fw;security_fw;0777;*;@;
+;msg-server.socket;messaging;messaging;;;;
+;cynara-agent.socket;;security_fw;0060;*;@;
+;cert-checker.socket;security_fw;security_fw;0777;;;
+;security-manager.socket;;;0777;*;@;
+;swap_manager.socket;owner;users;;*;@;
+;csr-admin.socket;;;0777;*;@;
+;sensord.socket;sensor;input;0777;*;@;
+;syslog.socket;;;0666;;;
+;connman.socket;;;;*;@;
+;dbus.socket;;;;*;@;
+;trm.socket;system_fw;system_fw;;*;@;
+;auth-fw-passwd-check.socket;security_fw;security_fw;0777;*;@;
+;ode.socket;;;;*;@;
+;device-certificate-manager.socket;;;0777;*;@;
+;sdbd_tcp.socket;;;;*;@;
+;sdbd.socket;;;;;;
+;cynara-admin.socket;;;0700;@;@;
+;auth-fw-passwd-set.socket;security_fw;security_fw;0777;*;@;
+;buxton2.socket;;;0777;*;@;
+;csr-cs.socket;;;0777;*;@;
+;mediacontroller.socket;multimedia_fw;multimedia_fw;;;;
+;auth-fw-passwd-reset.socket;security_fw;security_fw;0777;*;@;
+;privacy-guard-server.socket;security_fw;security_fw;0777;;;
+;systemd-journald-dev-log.socket;;;0666;;;
+;central-key-manager-api-storage.socket;;;0777;*;@;
+;csr-wp.socket;;;0777;*;@;
+;mtp-responder.socket;;;;;;
+;cert-server.socket;security_fw;security_fw;0777;;;
+;device-policy-manager.socket;security_fw;security_fw;0777;*;@;
+;systemd-journald.socket;;;0666;;;
diff --git a/test/new_service_test/target/common/systemd_service.list b/test/new_service_test/target/common/systemd_service.list
new file mode 100644 (file)
index 0000000..49341eb
--- /dev/null
@@ -0,0 +1,204 @@
+;ac.service;app_fw;app_fw;System;
+;accounts-service.service;service_fw;service_fw;System;
+;actd.service;root;root;System;
+;alarm-server.service;app_fw;app_fw;System;
+;app2sd-server.service;root;root;System;
+;asp-manager.service;network_fw;network_fw;System;
+;audit-trail.service;security_fw;security_fw;System;
+;auth-fw.service;security_fw;security_fw;System;
+;bluetooth-address.service;network_fw;network_fw;System;
+;bluetooth-ag-agent.service;network_fw;network_fw;System;
+;bluetooth-force-hci-logger.service;network_fw;network_fw;System;
+;bluetooth-frwk.service;network_fw;network_fw;System;
+;bluetooth-frwk-core.service;network_fw;network_fw;System;
+;bluetooth-hci-device.service;root;root;System;
+;bluetooth-hci-down.service;network_fw;network_fw;System;
+;bluetooth-hci-dump@.service;network_fw;network_fw;System;
+;bluetooth-hci-logger.service;network_fw;network_fw;System;
+;bluetooth-hci-logger-stop.service;network_fw;network_fw;System;
+;bluetooth-hci-up.service;network_fw;network_fw;System;
+;bluetooth-hciattach@.service;root;root;System;
+;bluetooth-map-agent.service;network_fw;network_fw;System;
+;bluetooth-pbap-agent.service;network_fw;network_fw;System;
+;bluetooth-share.service;network_fw;network_fw;System;
+;bluetooth-share-start.service;network_fw;network_fw;System;
+;bluetooth-stack-down.service;root;root;System;
+;bluetooth-stack-down-with-radio.service;network_fw;network_fw;System;
+;bluetooth-stack-up.service;network_fw;network_fw;System;
+;bluez-start.service;network_fw;network_fw;System;
+;booting-done.service;system_fw;system_fw;System;
+;boot-animation.service;application;application;System;
+;browser-provider.service;web_fw;web_fw;System;
+;buxton2.service;buxton;buxton;System;
+;callmgr.service;telephony;telephony;System;
+;capi-ui-sticker.service;ui_fw;ui_fw;System;
+;capmgr.service;app_fw;app_fw;System;
+;central-key-manager.service;key-manager;security_fw;System;
+;cert-checker.service;security_fw;security_fw;System;
+;cert-server.service;security_fw;security_fw;System;
+;chromium-efl.service;root;root;System::Privileged;
+;chromium-efl-install.service;web_fw;web_fw;System;
+;chromium-efl-update.service;root;root;System::Privileged;
+;clat.service;network_fw;network_fw;System;
+;connman-vpn.service;network_fw;network_fw;System;
+;connman.service;network_fw;network_fw;System;
+;console-getty.service;root;root;System;
+;console-shell.service;root;root;System;
+;container-getty@.service;root;root;System;
+;contextd.service;service_fw;service_fw;System;
+;crash-service.service;crash_worker;crash_worker;System;
+;csr.service;security_fw;security_fw;System;
+;cynara.service;cynara;cynara;System;
+;data-provider-master.service;app_fw;app_fw;System;
+;dbus.service;dbus;dbus;System;
+;debug-shell.service;root;root;System;
+;device-certificate-manager.service;security_fw;security_fw;System;
+;device-policy-manager.service;security_fw;security_fw;System;
+;device-policy-syspopup.service;security_fw;security_fw;System;
+;deviced.service;root;root;System::Privileged;
+;display-manager.service;root;root;System;
+;display-manager-monitor.service;graphic_fw;graphic_fw;System;
+;dlog_cleanup.service;log;log;System;
+;dlog_logger.service;log;log;System;
+;download-provider.service;web_fw;web_fw;System;
+;dummyasm.service;service_fw;service_fw;System;
+;edge-orchestration.service;system_fw;system_fw;System;
+;emergency.service;root;root;System;
+;esd.service;app_fw;app_fw;System;
+;factory-reset.service;root;root;System::Privileged; 
+;factory-reset-launch.service;root;root;System::Privileged;
+;faultd.service;root;root;System;
+;feedbackd.service;system_fw;system_fw;System;
+;fido.service;service_fw;service_fw;System;
+;fido-asm.service;service_fw;service_fw;System;
+;fido-bt-roaming-agent.service;service_fw;service_fw;System;
+;focus-server.service;multimedia_fw;multimedia_fw;System; # need to check by SFV
+;getty@.service;root;root;User::Shell;
+;gumd.service;root;root;System::Privileged;
+;gumd.service;root;root;System;
+;init-update.service;root;root;System::Privileged;
+;initrd-cleanup.service;root;root;System;
+;initrd-parse-etc.service;root;root;System;
+;initrd-switch-root.service;root;root;System;
+;initrd-udevadm-cleanup-db.service;root;root;System;
+;inm-manager.service;network_fw;network_fw;System;
+;kmod-static-nodes.service;root;root;System;
+;krate.service;root;root;System;
+;lbs-server.service;location;location;System;
+;ldconfig.service;root;root;System;
+;license-manager-agent.service;security_fw;security_fw;System;
+;log_dump.service;root;root;System;
+;log_dump.service;system_fw;system_fw;System; # conditionaly used
+;mdgd.service;network_fw;network_fw;System;
+;media-server.service;multimedia_fw;multimedia_fw;System;
+;mediacontroller.service;multimedia_fw;multimedia_fw;System;
+;mm-resource-managerd.service;multimedia_fw;multimedia_fw;System;
+;mobileap-agent.service;network_fw;network_fw;System;
+;modemd.service;telephony;telephony;System;
+;msg-server.service;messaging;messaging;System;
+;mtp-initiator.service;network_fw;network_fw;System;
+;mtp-responder.service;network_fw;network_fw;System;
+;murphyd.service;multimedia_fw;multimedia_fw;System;
+;muse-server.service;multimedia_fw;multimedia_fw;System;
+;net-config.service;network_fw;network_fw;System;
+;nether.service;security_fw;security_fw;System;
+;nvitemd.service;telephony;telephony;System;
+;obex.service;network_fw;network_fw;System;
+;ode.service;root;root;System::Privileged;
+;ode-progress-ui@.service;application;application;System;
+;offline-update.service;root;root;System::Privileged;
+;opt-usr-fsck.service;system_fw;disk;System;
+;package-manager.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System;
+;pass.service;system_fw;system_fw;System;
+;phonenumber-utils.service;service_fw;service_fw;System;
+;pkg-db-recovery.service;root;root;System;
+;pkgdir-tool.service;app_fw;app_fw;System;
+;privacy-guard-server.service;security_fw;security_fw;System;
+;pulseaudio.service;root;root;System;
+;pushd.service;service_fw;service_fw;System;
+;quotaon.service;root;root;System;
+;radio-bt-off.service;network_fw;network_fw;System;
+;radio-bt-on.service;network_fw;network_fw;System;
+;radio-bt-on-stop.service;root;root;System;
+;rescue.service;root;root;System;
+;resize2fs@.service;root;root;System;
+;resourced.service;root;root;System;
+;rndis.service;network_fw;network_fw;System;
+;sdbd.service;sdk;sdk;System;
+;sdbd_tcp.service;sdk;sdk;System;
+;security-config.service;root;root;System::Privileged;
+;security-manager-cleanup.service;root;root;System::Privileged;
+;security-manager-rules-loader.service;root;root;System::Privileged;
+;security-manager.service;root;root;System::Privileged;
+;sensord.service;sensor;input;System;
+;serial-getty@.service;root;root;User::Shell;
+;shutdown-animation.service;application;application;System;
+;smartcard-service.service;network_fw;network_fw;System;
+;sound-server.service;multimedia_fw;multimedia_fw;System;
+;stability-monitor.service;stability_monitor;stability_monitor;System;
+;stc-iptables.service;network_fw;network_fw;System;
+;stc-manager.service;root;root;System;
+;storaged.service;root;root;System::Privileged;
+;swap_manager.service;system_fw;system_fw;System;
+;sys-kernel-tracing.service;system_fw;system_fw;System;
+;system-default-target-done.service;system_fw;system_fw;System;
+;system-delayed-target-done.service;system_fw;system_fw;System;
+;system-delayed-target-trigger.service;root;root;System;
+;system-popup.service;system_fw;system_fw;System;
+;systemd-ask-password-console.service;root;root;System;
+;systemd-ask-password-wall.service;root;root;System;
+;systemd-binfmt.service;root;root;System;
+;systemd-exit.service;root;root;System;
+;systemd-fsck-root.service;root;root;System;
+;systemd-fsck@.service;root;root;System;
+;systemd-halt.service;root;root;System;
+;systemd-hibernate-resume@.service;root;root;System;
+;systemd-hibernate.service;root;root;System;
+;systemd-hostnamed.service;root;root;System; # need to be checked whether it is existed
+;systemd-hwdb-update.service;root;root;System;
+;systemd-hybrid-sleep.service;root;root;System;
+;systemd-initctl.service;root;root;System;
+;systemd-journal-catalog-update.service;root;root;System;
+;systemd-journal-flush.service;root;root;System;
+;systemd-journald.service;root;root;System;
+;systemd-kexec.service;root;root;System;
+;systemd-localed.service;root;root;System;
+;systemd-logind.service;root;root;System::Privileged;
+;systemd-machine-id-commit.service;root;root;System;
+;systemd-modules-load.service;root;root;System;
+;systemd-nspawn@.service;root;root;System;
+;systemd-poweroff.service;root;root;System;
+;systemd-quotacheck.service;root;root;System;
+;systemd-reboot.service;root;root;System;
+;systemd-remount-fs.service;root;root;System;
+;systemd-suspend.service;root;root;System;
+;systemd-sysctl.service;root;root;System;
+;systemd-tmpfiles-setup-dev.service;root;root;System::Privileged;
+;systemd-tmpfiles-setup.service;root;root;System::Privileged;
+;systemd-udev-settle.service;root;root;System;
+;systemd-udev-trigger.service;root;root;System;
+;systemd-udevd.service;root;root;System::Privileged;
+;systemd-update-done.service;root;root;System;
+;systemd-update-utmp-runlevel.service;root;root;System;
+;systemd-update-utmp.service;root;root;System;
+;systemd-user-sessions.service;root;root;System;
+;systemd-vconsole-setup.service;root;root;System;
+;telephony-daemon.service;telephony;telephony;System;
+;tizen-fstrim-user.service;root;root;System;
+;tizen-system-env.service;root;root;System;
+;tizenid.service;system_fw;system_fw;System;
+;tlm.service;root;root;User;
+;trm.service;system_fw;system_fw;System;
+;ttrace-marker.service;system_fw;system_fw;System;
+;ua-manager.service;network_fw;network_fw;System;
+;udev-sdb-init.service;root;root;System;
+;usb-host-ffs-test-daemon.service;system_fw;system_fw;System;
+;user@.service;%i;users;User; # Need to be defined group
+;__user@.service;%i;;User; # Need to be defined group
+;wait-mount@.service;system_fw;system_fw;System;
+;webappenc-initializer.service;security_fw;security_fw;System;
+;wifi-direct-manager.service;network_fw;network_fw;System;
+;wifi-ready.service;network_fw;network_fw;System;
+;wmeshd.service;network_fw;network_fw;System; # need to be checked whether it is existed
+;zigbee-daemon.service;network_fw;network_fw;System; # need to be checked whether it is existed