Apply Tizen 3.0 security policy

Change-Id: I53eed5c5e09583ccf604534c5f1dc178e95d7016
Signed-off-by: Taejin Woo <tt.woo@samsung.com>

diff --git a/bluez.manifest b/bluez.manifest
index ce2b940..d966cf5 100644 (file)
--- a/bluez.manifest
+++ b/bluez.manifest
@@ -1,91 +1,4 @@
-<manifest>
-    <define>
-        <domain name="bluez"/>
-    </define>
-    <assign>
-        <filesystem path="/usr/bin/ciptool" label="bluez" exec_label="bluez"/>
-        <filesystem path="/usr/bin/gatttool" label="bluez" exec_label="bluez"/>
-        <filesystem path="/usr/bin/hcitool" label="bluez" exec_label="bluez"/>
-        <filesystem path="/usr/bin/l2ping" label="bluez" exec_label="bluez"/>
-        <filesystem path="/usr/bin/rfcomm" label="bluez" exec_label="bluez"/>
-        <filesystem path="/usr/bin/sdptool" label="bluez" exec_label="bluez"/>
-
-        <filesystem path="/etc/bluetooth/audio.conf" label="bluez"/>
-        <filesystem path="/etc/bluetooth/main.conf" label="bluez"/>
-        <filesystem path="/etc/bluetooth/network.conf" label="bluez"/>
-        <filesystem path="/etc/bluetooth/rfcomm.conf" label="bluez"/>
-
-        <filesystem path="/usr/lib/bluetooth/bluetoothd" label="bluez" exec_label="bluez"/>
-        <filesystem path="/usr/bin/hciattach" label="bluez" exec_label="bluez"/>
-        <filesystem path="/usr/bin/hciconfig" label="bluez" exec_label="bluez"/>
-
-        <dbus name="org.bluez" own="bluez" bus="system">
-            <node name="/org/bluez/device/connection">
-                <interface name="org.bluez.Device1">
-                    <method name="ConnectProfile">
-                        <annotation name="com.tizen.smack" value="bt-service::public" />
-                        <annotation name="com.tizen.smack" value="obexd::public" />
-                        <annotation name="com.tizen.smack" value="bt_agent::public" />
-                    </method>
-                    <method name="DisconnectProfile">
-                        <annotation name="com.tizen.smack" value="bt-service::public" />
-                        <annotation name="com.tizen.smack" value="obexd::public" />
-                        <annotation name="com.tizen.smack" value="bt_agent::public" />
-                    </method>
-                    <method name="DiscoverServices">
-                        <annotation name="com.tizen.smack" value="bt-service::public" />
-                        <annotation name="com.tizen.smack" value="obexd::public" />
-                        <annotation name="com.tizen.smack" value="bt_agent::public" />
-                    </method>
-                    <method name="GetPrimServices">
-                        <annotation name="com.tizen.smack" value="bt-service::public" />
-                    </method>
-                </interface>
-            </node>
-            <node name="/org/bluez/gatt/char">
-                <interface name="org.bluez.Characteristic">
-                    <annotation name="com.tizen.smack" value="bt-service::public" />
-                </interface>
-            </node>
-            <node name="/org/bluez/hdp/manager">
-                <interface name="org.bluez.HealthManager1">
-                    <annotation name="com.tizen.smack" value="bt-service::public" />
-                </interface>
-            </node>
-            <node name="/org/bluez/hdp/device">
-                <interface name="org.bluez.HealthDevice1">
-                    <annotation name="com.tizen.smack" value="bt-service::public" />
-                </interface>
-            </node>
-            <node name="/org/bluez/hdp/channel">
-                <interface name="org.bluez.HealthChannel1">
-                    <annotation name="com.tizen.smack" value="bt-service::public" />
-                </interface>
-            </node>
-            <node name="/org/bluez/profile/manager">
-                <interface name="org.bluez.ProfileManager1">
-                    <method name="RegisterProfile">
-                        <annotation name="com.tizen.smack" value="bt-service::public" />
-                        <annotation name="com.tizen.smack" value="obexd::public" />
-                        <annotation name="com.tizen.smack" value="bt_agent::public" />
-                    </method>
-                    <method name="UnregisterProfile">
-                        <annotation name="com.tizen.smack" value="bt-service::public" />
-                        <annotation name="com.tizen.smack" value="obexd::public" />
-                        <annotation name="com.tizen.smack" value="bt_agent::public" />
-                    </method>
-                    <method name="RegisterProfile1">
-                        <annotation name="com.tizen.smack" value="bt-service::platform" />
-                        <annotation name="com.tizen.smack" value="obexd::public" />
-                        <annotation name="com.tizen.smack" value="bt_agent::public" />
-                    </method>
-                    <method name="RegisterProfile2">
-                        <annotation name="com.tizen.smack" value="bt-service::platform" />
-                    </method>
-                </interface>
-            </node>
-        </dbus>
-    </assign>
+fest>
     <request>
         <domain name="_"/>
     </request>

diff --git a/obexd.manifest b/obexd.manifest
index 6c0681e..75b0fa5 100644 (file)
--- a/obexd.manifest
+++ b/obexd.manifest
@@ -1,26 +1,5 @@
 <manifest>
-    <define>
-        <domain name="obexd"/>
-       <request>
-               <smack request="system::vconf" type="rwxat"/>
-               <smack request="system::share" type="rwxat"/>
-               <smack request="system::ext_storage" type="rwxat"/>
-               <smack request="system::media" type="rwxat"/>
-               <smack request="sys-assert::core" type="rwxat"/>
-               <smack request="ui-gadget::client" type="rwx"/>
-               <smack request="dbus" type="rwx"/>
-               <smack request="syslogd" type="w"/>
-               <smack request="bluez" type="rw"/>
-       </request>
-       <permit>
-               <smack permit="dbus" type="rwx"/>
-       </permit>
-    </define>
-    <assign>
-        <filesystem path="/usr/lib/obex/plugins/" label="_"/>
-        <filesystem path="/usr/share/dbus-1/services/org.bluez.obex.service" label="_"/>
-    </assign>
     <request>
-        <domain name="obexd"/>
+        <domain name="_"/>
     </request>
 </manifest>