Modify script to create policy db at FOTA upgrade

Change-Id: I86ec27ac971678a8a7bb933286266f00cd789df5
Signed-off-by: Yunjin Lee <yunjin-.lee@samsung.com>

diff --git a/upgrade/201.security_upgrade.sh b/upgrade/201.security_upgrade.sh
index 0afe9a89efefcc0844fbef918d0182ada0a7f46c..2e13bc948a1a84af5ae9e22e345aeb53bbf46b74 100644 (file)
--- a/upgrade/201.security_upgrade.sh
+++ b/upgrade/201.security_upgrade.sh
@@ -22,6 +22,8 @@ CYNARA_DIR=/opt/var/cynara
 SECURITY_MANAGER_DB=/opt/dbspace/.security-manager.db
 SECURITY_MANAGER_DB_JOURNAL=/opt/dbspace/.security-manager.db-journal
 SECURITY_MANAGER_DIR=/opt/var/security-manager
+PRIVILEGE_CHECKER_POLICY_DB=/opt/dbspace/.policy.db
+PRIVILEGE_CHECKER_POLICY_DB_JOURNAL=/opt/dbspace/.policy.db-journal
 
 
 #--------------------------------------
@@ -93,6 +95,17 @@ chown root:root $SECURITY_MANAGER_DB_JOURNAL
 chsmack -a System $SECURITY_MANAGER_DB
 chsmack -a System $SECURITY_MANAGER_DB_JOURNAL
 
+# init Privilege-checker dpm/mdm policy database
+
+/usr/share/privilege-manager/policy_db_updater.sh
+
+chmod 660 $PRIVILEGE_CHECKER_POLICY_DB
+chmod 660 $PRIVILEGE_CHECKER_POLICY_DB_JOURNAL
+chown root:security_fw $PRIVILEGE_CHECKER_POLICY_DB
+chown root:security_fw $PRIVILEGE_CHECKER_POLICY_DB_JOURNAL
+chsmack -a System $PRIVILEGE_CHECKER_POLICY_DB
+chsmack -a System $PRIVILEGE_CHECKER_POLICY_DB_JOURNAL
+
 # Common Smack labeling
 /usr/share/security-config/set_label