Fix access deny issue on dbus policy 68/180568/1
authorWootak Jung <wootak.jung@samsung.com>
Thu, 31 May 2018 01:16:38 +0000 (10:16 +0900)
committerWootak Jung <wootak.jung@samsung.com>
Thu, 31 May 2018 01:23:05 +0000 (10:23 +0900)
Deny policy in context="default" has been applied
because of incorrect policy in other context.

Change-Id: I6185a0d784c0f082276bb4a1e002e3b86ddd9bff

src/bluetooth.conf

index fc9b95f..5dc191f 100755 (executable)
   <!-- ../system.conf have denied everything, so we just punch some holes -->
 
   <policy user="root">
-    <allow own="org.projectx.bluetooth"/>
-    <allow receive_sender="org.projectx.bluetooth"/>
-    <allow send_destination="org.projectx.bluetooth"/>
     <allow own="org.bluez.frwk_agent"/>
     <allow receive_sender="org.bluez.frwk_agent"/>
     <allow send_destination="org.bluez.frwk_agent"/>
-    <allow own="org.bluez.Agent1"/>
-    <allow receive_sender="org.bluez.Agent1"/>
-    <allow send_destination="org.bluez.Agent1"/>
-    <allow own="org.bluez.Adapter1"/>
-    <allow receive_sender="org.bluez.Adapter1"/>
-    <allow send_destination="org.bluez.Adapter1"/>
-    <allow own="org.bluez.Manager"/>
-    <allow receive_sender="org.bluez.Manager"/>
-    <allow send_destination="org.bluez.Manager"/>
-    <allow own="org.bluez.Device1"/>
-    <allow receive_sender="org.bluez.Device1"/>
-    <allow send_destination="org.bluez.Device1"/>
-    <allow own="org.bluez.MediaEndpoint1"/>
-    <allow receive_sender="org.bluez.MediaEndpoint1"/>
-    <allow send_destination="org.bluez.MediaEndpoint1"/>
-    <allow own="org.bluez.MediaTransport1"/>
-    <allow receive_sender="org.bluez.MediaTransport1"/>
-    <allow send_destination="org.bluez.MediaTransport1"/>
-    <allow own="org.bluez.MediaPlayer1"/>
-    <allow receive_sender="org.bluez.MediaPlayer1"/>
-    <allow send_destination="org.bluez.MediaPlayer1"/>
-    <allow own="org.bluez.Profile1"/>
-    <allow receive_sender="org.bluez.Profile1"/>
-    <allow send_destination="org.bluez.Profile1"/>
+    <allow own="org.bluez"/>
+    <allow receive_sender="org.bluez"/>
+    <allow send_destination="org.bluez"/>
   </policy>
 
   <!-- allow users of bt_use group (Tizen BT group) to
        communicate with bluetoothd -->
   <policy group="bt_use">
-    <allow receive_sender="org.projectx.bluetooth"/>
-    <allow send_destination="org.projectx.bluetooth"/>
     <allow receive_sender="org.bluez.frwk_agent"/>
     <allow send_destination="org.bluez.frwk_agent"/>
-    <allow receive_sender="org.bluez.Agent1"/>
-    <allow send_destination="org.bluez.Agent1"/>
-    <allow receive_sender="org.bluez.Adapter1"/>
-    <allow send_destination="org.bluez.Adapter1"/>
-    <allow receive_sender="org.bluez.Manager"/>
-    <allow send_destination="org.bluez.Manager"/>
-    <allow receive_sender="org.bluez.Device1"/>
-    <allow send_destination="org.bluez.Device1"/>
-    <allow receive_sender="org.bluez.MediaEndpoint1"/>
-    <allow send_destination="org.bluez.MediaEndpoint1"/>
-    <allow receive_sender="org.bluez.MediaTransport1"/>
-    <allow send_destination="org.bluez.MediaTransport1"/>
-    <allow receive_sender="org.bluez.MediaPlayer1"/>
-    <allow send_destination="org.bluez.MediaPlayer1"/>
-    <allow receive_sender="org.bluez.Profile1"/>
-    <allow send_destination="org.bluez.Profile1"/>
+    <allow receive_sender="org.bluez"/>
+    <allow send_destination="org.bluez"/>
   </policy>
 
   <!-- allow users of lp group (printing subsystem) to
        communicate with bluetoothd -->
   <policy group="lp">
-    <allow receive_sender="org.projectx.bluetooth"/>
-    <allow send_destination="org.projectx.bluetooth"/>
     <allow receive_sender="org.bluez.frwk_agent"/>
     <allow send_destination="org.bluez.frwk_agent"/>
-    <allow receive_sender="org.bluez.Agent1"/>
-    <allow send_destination="org.bluez.Agent1"/>
-    <allow receive_sender="org.bluez.Adapter1"/>
-    <allow send_destination="org.bluez.Adapter1"/>
-    <allow receive_sender="org.bluez.Manager"/>
-    <allow send_destination="org.bluez.Manager"/>
-    <allow receive_sender="org.bluez.Device1"/>
-    <allow send_destination="org.bluez.Device1"/>
-    <allow receive_sender="org.bluez.MediaEndpoint1"/>
-    <allow send_destination="org.bluez.MediaEndpoint1"/>
-    <allow receive_sender="org.bluez.MediaTransport1"/>
-    <allow send_destination="org.bluez.MediaTransport1"/>
-    <allow receive_sender="org.bluez.MediaPlayer1"/>
-    <allow send_destination="org.bluez.MediaPlayer1"/>
-    <allow receive_sender="org.bluez.Profile1"/>
-    <allow send_destination="org.bluez.Profile1"/>
+    <allow receive_sender="org.bluez"/>
+    <allow send_destination="org.bluez"/>
   </policy>
 
   <policy group="network_fw">
-    <allow own="org.projectx.bluetooth"/>
-    <allow receive_sender="org.projectx.bluetooth"/>
-    <allow send_destination="org.projectx.bluetooth"/>
     <allow own="org.bluez.frwk_agent"/>
     <allow receive_sender="org.bluez.frwk_agent"/>
     <allow send_destination="org.bluez.frwk_agent"/>
-    <allow own="org.bluez.Agent1"/>
-    <allow receive_sender="org.bluez.Agent1"/>
-    <allow send_destination="org.bluez.Agent1"/>
-    <allow own="org.bluez.Adapter1"/>
-    <allow receive_sender="org.bluez.Adapter1"/>
-    <allow send_destination="org.bluez.Adapter1"/>
-    <allow own="org.bluez.Manager"/>
-    <allow receive_sender="org.bluez.Manager"/>
-    <allow send_destination="org.bluez.Manager"/>
-    <allow own="org.bluez.Device1"/>
-    <allow receive_sender="org.bluez.Device1"/>
-    <allow send_destination="org.bluez.Device1"/>
-    <allow own="org.bluez.MediaEndpoint1"/>
-    <allow receive_sender="org.bluez.MediaEndpoint1"/>
-    <allow send_destination="org.bluez.MediaEndpoint1"/>
-    <allow own="org.bluez.MediaTransport1"/>
-    <allow receive_sender="org.bluez.MediaTransport1"/>
-    <allow send_destination="org.bluez.MediaTransport1"/>
-    <allow own="org.bluez.MediaPlayer1"/>
-    <allow receive_sender="org.bluez.MediaPlayer1"/>
-    <allow send_destination="org.bluez.MediaPlayer1"/>
-    <allow own="org.bluez.Profile1"/>
-    <allow receive_sender="org.bluez.Profile1"/>
-    <allow send_destination="org.bluez.Profile1"/>
+    <allow own="org.bluez"/>
+    <allow receive_sender="org.bluez"/>
+    <allow send_destination="org.bluez"/>
   </policy>
 
   <policy context="default">