Add rule files for SMACK

Signed-off-by: Taeyoung Kim <ty317.kim@samsung.com>
Change-Id: I289b054eb1afc9337b794dbd60decd5ac3b6a9b2

diff --git a/lowbatt-popup/CMakeLists.txt b/lowbatt-popup/CMakeLists.txt
index ee81c01..07326e5 100755 (executable)
--- a/lowbatt-popup/CMakeLists.txt
+++ b/lowbatt-popup/CMakeLists.txt
@@ -60,6 +60,9 @@ INSTALL(FILES ${CMAKE_SOURCE_DIR}/data/org.tizen.lowbat-syspopup.xml DESTINATION
 # install ini file
 INSTALL(FILES ${CMAKE_SOURCE_DIR}/data/${PROJECT_NAME}.ini DESTINATION /usr/share/process-info)
 
+# instatll rule file
+INSTALL(FILES ${CMAKE_SOURCE_DIR}/org.tizen.lowbat-syspopup.rule DESTINATION /opt/etc/smack/accesses.d)
+
 # i18n
 ADD_SUBDIRECTORY(po_lowbatt)
 

diff --git a/lowmem-popup/CMakeLists.txt b/lowmem-popup/CMakeLists.txt
index 332579b..8ee9962 100755 (executable)
--- a/lowmem-popup/CMakeLists.txt
+++ b/lowmem-popup/CMakeLists.txt
@@ -61,6 +61,9 @@ INSTALL(FILES ${CMAKE_SOURCE_DIR}/data/org.tizen.lowmem-syspopup.xml DESTINATION
 # install ini file
 INSTALL(FILES ${CMAKE_SOURCE_DIR}/data/${PROJECT_NAME}.ini DESTINATION /usr/share/process-info)
 
+# instatll rule file
+INSTALL(FILES ${CMAKE_SOURCE_DIR}/org.tizen.lowmem-syspopup.rule DESTINATION /opt/etc/smack/accesses.d)
+
 # i18n
 ADD_SUBDIRECTORY(po_lowmem)
 

diff --git a/mmc-popup/CMakeLists.txt b/mmc-popup/CMakeLists.txt
index c2461d1..584b476 100755 (executable)
--- a/mmc-popup/CMakeLists.txt
+++ b/mmc-popup/CMakeLists.txt
@@ -51,6 +51,9 @@ INSTALL(FILES ${CMAKE_SOURCE_DIR}/data/org.tizen.mmc-syspopup.xml DESTINATION /u
 # install ini file
 INSTALL(FILES ${CMAKE_SOURCE_DIR}/data/${PROJECT_NAME}.ini DESTINATION /usr/share/process-info)
 
+# instatll rule file
+INSTALL(FILES ${CMAKE_SOURCE_DIR}/org.tizen.mmc-syspopup.rule DESTINATION /opt/etc/smack/accesses.d)
+
 # i18n
 ADD_SUBDIRECTORY(po_mmc)
 

diff --git a/packaging/org.tizen.lowbat-syspopup.rule b/packaging/org.tizen.lowbat-syspopup.rule
new file mode 100644 (file)
index 0000000..b6ddfbd
--- /dev/null
+++ b/packaging/org.tizen.lowbat-syspopup.rule
@@ -0,0 +1,46 @@
+org.tizen.lowbat-syspopup system::vconf rwxat
+org.tizen.lowbat-syspopup system r-x--
+org.tizen.lowbat-syspopup svi-data r-x--
+org.tizen.lowbat-syspopup system::media rwxat
+org.tizen.lowbat-syspopup system::share rwxat
+org.tizen.lowbat-syspopup aul::db r-x--
+org.tizen.lowbat-syspopup system::use_internet r----
+org.tizen.lowbat-syspopup system::homedir rwxat
+org.tizen.lowbat-syspopup system::app_logging -w---
+org.tizen.lowbat-syspopup isf r-x--
+org.tizen.lowbat-syspopup ail::db rw---
+org.tizen.lowbat-syspopup immvibed rw---
+org.tizen.lowbat-syspopup syspopup::db rw---
+org.tizen.lowbat-syspopup power_manager -w---
+org.tizen.lowbat-syspopup xorg rw---
+org.tizen.lowbat-syspopup system::system_bklight -w---
+org.tizen.lowbat-syspopup system-server r-x--
+org.tizen.lowbat-syspopup deviced rwx--
+org.tizen.lowbat-syspopup display_wd r-x--
+org.tizen.lowbat-syspopup live-magazine::data --x--
+org.tizen.lowbat-syspopup sound_server rwxa-
+org.tizen.lowbat-syspopup dbus rwx--
+org.tizen.lowbat-syspopup pulseaudio rwxat
+org.tizen.lowbat-syspopup devman -wx--
+org.tizen.lowbat-syspopup org.tizen.data-provider-master rw---
+org.tizen.lowbat-syspopup data-provider-master rw---
+org.tizen.lowbat-syspopup data-provider-master::share --x--
+org.tizen.lowbat-syspopup sys-assert::core rwxat
+org.tizen.lowbat-syspopup _ -wx--
+org.tizen.lowbat-syspopup stest-service -w---
+org.tizen.lowbat-syspopup tts-server rwx--
+org.tizen.lowbat-syspopup syslogd -w---
+org.tizen.lowbat-syspopup device::app_logging -w---
+org.tizen.lowbat-syspopup device::led r----
+org.tizen.lowbat-syspopup org.tizen.svoice rw---
+org.tizen.lowbat-syspopup org.tizen.voicerecorder rw---
+stest-service org.tizen.lowbat-syspopup r-x--
+system-server org.tizen.lowbat-syspopup -w---
+deviced org.tizen.lowbat-syspopup -w---
+display_wd org.tizen.lowbat-syspopup -w---
+dbus org.tizen.lowbat-syspopup -w---
+e17 org.tizen.lowbat-syspopup -w---
+pulseaudio org.tizen.lowbat-syspopup -w---
+org.tizen.app-tray org.tizen.lowbat-syspopup r-x--
+tts-server org.tizen.lowbat-syspopup rw---
+_ org.tizen.lowbat-syspopup -w---

diff --git a/packaging/org.tizen.lowmem-syspopup.rule b/packaging/org.tizen.lowmem-syspopup.rule
new file mode 100644 (file)
index 0000000..45f53dd
--- /dev/null
+++ b/packaging/org.tizen.lowmem-syspopup.rule
@@ -0,0 +1,46 @@
+org.tizen.lowmem-syspopup system::vconf rwxat
+org.tizen.lowmem-syspopup system r-x--
+org.tizen.lowmem-syspopup svi-data r-x--
+org.tizen.lowmem-syspopup system::media rwxat
+org.tizen.lowmem-syspopup system::share rwxat
+org.tizen.lowmem-syspopup aul::db r-x--
+org.tizen.lowmem-syspopup system::use_internet r----
+org.tizen.lowmem-syspopup system::homedir rwxat
+org.tizen.lowmem-syspopup system::app_logging -w---
+org.tizen.lowmem-syspopup isf r-x--
+org.tizen.lowmem-syspopup ail::db rw---
+org.tizen.lowmem-syspopup immvibed rw---
+org.tizen.lowmem-syspopup syspopup::db rw---
+org.tizen.lowmem-syspopup power_manager -w---
+org.tizen.lowmem-syspopup xorg rw---
+org.tizen.lowmem-syspopup system::system_bklight -w---
+org.tizen.lowmem-syspopup system-server r-x--
+org.tizen.lowmem-syspopup deviced rwx--
+org.tizen.lowmem-syspopup display_wd r-x--
+org.tizen.lowmem-syspopup live-magazine::data --x--
+org.tizen.lowmem-syspopup sound_server rwxa-
+org.tizen.lowmem-syspopup dbus rwx--
+org.tizen.lowmem-syspopup pulseaudio rwxat
+org.tizen.lowmem-syspopup devman -wx--
+org.tizen.lowmem-syspopup org.tizen.data-provider-master rw---
+org.tizen.lowmem-syspopup data-provider-master rw---
+org.tizen.lowmem-syspopup data-provider-master::share --x--
+org.tizen.lowmem-syspopup sys-assert::core rwxat
+org.tizen.lowmem-syspopup _ -wx--
+org.tizen.lowmem-syspopup stest-service -w---
+org.tizen.lowmem-syspopup tts-server rwx--
+org.tizen.lowmem-syspopup syslogd -w---
+org.tizen.lowmem-syspopup device::app_logging -w---
+org.tizen.lowmem-syspopup device::led r----
+org.tizen.lowmem-syspopup org.tizen.svoice rw---
+org.tizen.lowmem-syspopup org.tizen.voicerecorder rw---
+stest-service org.tizen.lowmem-syspopup r-x--
+system-server org.tizen.lowmem-syspopup -w---
+deviced org.tizen.lowmem-syspopup -w---
+display_wd org.tizen.lowmem-syspopup -w---
+dbus org.tizen.lowmem-syspopup -w---
+e17 org.tizen.lowmem-syspopup -w---
+pulseaudio org.tizen.lowmem-syspopup -w---
+org.tizen.app-tray org.tizen.lowmem-syspopup r-x--
+tts-server org.tizen.lowmem-syspopup rw---
+_ org.tizen.lowmem-syspopup -w---

diff --git a/packaging/org.tizen.mmc-syspopup.rule b/packaging/org.tizen.mmc-syspopup.rule
new file mode 100644 (file)
index 0000000..8dc57ef
--- /dev/null
+++ b/packaging/org.tizen.mmc-syspopup.rule
@@ -0,0 +1,46 @@
+org.tizen.mmc-syspopup system::vconf rwxat
+org.tizen.mmc-syspopup system r-x--
+org.tizen.mmc-syspopup svi-data r-x--
+org.tizen.mmc-syspopup system::media rwxat
+org.tizen.mmc-syspopup system::share rwxat
+org.tizen.mmc-syspopup aul::db r-x--
+org.tizen.mmc-syspopup system::use_internet r----
+org.tizen.mmc-syspopup system::homedir rwxat
+org.tizen.mmc-syspopup system::app_logging -w---
+org.tizen.mmc-syspopup isf r-x--
+org.tizen.mmc-syspopup ail::db rw---
+org.tizen.mmc-syspopup immvibed rw---
+org.tizen.mmc-syspopup syspopup::db rw---
+org.tizen.mmc-syspopup power_manager -w---
+org.tizen.mmc-syspopup xorg rw---
+org.tizen.mmc-syspopup system::system_bklight -w---
+org.tizen.mmc-syspopup system-server r-x--
+org.tizen.mmc-syspopup deviced rwx--
+org.tizen.mmc-syspopup display_wd r-x--
+org.tizen.mmc-syspopup live-magazine::data --x--
+org.tizen.mmc-syspopup sound_server rwxa-
+org.tizen.mmc-syspopup dbus rwx--
+org.tizen.mmc-syspopup pulseaudio rwxat
+org.tizen.mmc-syspopup devman -wx--
+org.tizen.mmc-syspopup org.tizen.data-provider-master rw---
+org.tizen.mmc-syspopup data-provider-master rw---
+org.tizen.mmc-syspopup data-provider-master::share --x--
+org.tizen.mmc-syspopup sys-assert::core rwxat
+org.tizen.mmc-syspopup _ -wx--
+org.tizen.mmc-syspopup stest-service -w---
+org.tizen.mmc-syspopup tts-server rwx--
+org.tizen.mmc-syspopup syslogd -w---
+org.tizen.mmc-syspopup device::app_logging -w---
+org.tizen.mmc-syspopup device::led r----
+org.tizen.mmc-syspopup org.tizen.svoice rw---
+org.tizen.mmc-syspopup org.tizen.voicerecorder rw---
+stest-service org.tizen.mmc-syspopup r-x--
+system-server org.tizen.mmc-syspopup -w---
+deviced org.tizen.mmc-syspopup -w---
+display_wd org.tizen.mmc-syspopup -w---
+dbus org.tizen.mmc-syspopup -w---
+e17 org.tizen.mmc-syspopup -w---
+pulseaudio org.tizen.mmc-syspopup -w---
+org.tizen.app-tray org.tizen.mmc-syspopup r-x--
+tts-server org.tizen.mmc-syspopup rw---
+_ org.tizen.mmc-syspopup -w---

diff --git a/packaging/org.tizen.poweroff-syspopup.rule b/packaging/org.tizen.poweroff-syspopup.rule
new file mode 100644 (file)
index 0000000..4c23131
--- /dev/null
+++ b/packaging/org.tizen.poweroff-syspopup.rule
@@ -0,0 +1,46 @@
+org.tizen.poweroff-syspopup system::vconf rwxat
+org.tizen.poweroff-syspopup system r-x--
+org.tizen.poweroff-syspopup svi-data r-x--
+org.tizen.poweroff-syspopup system::media rwxat
+org.tizen.poweroff-syspopup system::share rwxat
+org.tizen.poweroff-syspopup aul::db r-x--
+org.tizen.poweroff-syspopup system::use_internet r----
+org.tizen.poweroff-syspopup system::homedir rwxat
+org.tizen.poweroff-syspopup system::app_logging -w---
+org.tizen.poweroff-syspopup isf r-x--
+org.tizen.poweroff-syspopup ail::db rw---
+org.tizen.poweroff-syspopup immvibed rw---
+org.tizen.poweroff-syspopup syspopup::db rw---
+org.tizen.poweroff-syspopup power_manager -w---
+org.tizen.poweroff-syspopup xorg rw---
+org.tizen.poweroff-syspopup system::system_bklight -w---
+org.tizen.poweroff-syspopup system-server r-x--
+org.tizen.poweroff-syspopup deviced rwx--
+org.tizen.poweroff-syspopup display_wd r-x--
+org.tizen.poweroff-syspopup live-magazine::data --x--
+org.tizen.poweroff-syspopup sound_server rwxa-
+org.tizen.poweroff-syspopup dbus rwx--
+org.tizen.poweroff-syspopup pulseaudio rwxat
+org.tizen.poweroff-syspopup devman -wx--
+org.tizen.poweroff-syspopup org.tizen.data-provider-master rw---
+org.tizen.poweroff-syspopup data-provider-master rw---
+org.tizen.poweroff-syspopup data-provider-master::share --x--
+org.tizen.poweroff-syspopup sys-assert::core rwxat
+org.tizen.poweroff-syspopup _ -wx--
+org.tizen.poweroff-syspopup stest-service -w---
+org.tizen.poweroff-syspopup tts-server rwx--
+org.tizen.poweroff-syspopup syslogd -w---
+org.tizen.poweroff-syspopup device::app_logging -w---
+org.tizen.poweroff-syspopup device::led rw---
+org.tizen.poweroff-syspopup org.tizen.svoice rw---
+org.tizen.poweroff-syspopup org.tizen.voicerecorder rw---
+stest-service org.tizen.poweroff-syspopup r-x--
+system-server org.tizen.poweroff-syspopup -w---
+deviced org.tizen.poweroff-syspopup -w---
+display_wd org.tizen.poweroff-syspopup -w---
+dbus org.tizen.poweroff-syspopup -w---
+e17 org.tizen.poweroff-syspopup -w---
+pulseaudio org.tizen.poweroff-syspopup -w---
+org.tizen.app-tray org.tizen.poweroff-syspopup r-x--
+tts-server org.tizen.poweroff-syspopup rw---
+_ org.tizen.poweroff-syspopup -w---

diff --git a/packaging/org.tizen.usb-syspopup.rule b/packaging/org.tizen.usb-syspopup.rule
new file mode 100644 (file)
index 0000000..cca8f4f
--- /dev/null
+++ b/packaging/org.tizen.usb-syspopup.rule
@@ -0,0 +1,21 @@
+usb-syspopup device::app_logging -w---
+usb-syspopup system::homedir rwxat
+usb-syspopup system::use_internet r----
+usb-syspopup system::vconf rwxat
+usb-syspopup xorg rw---
+usb-syspopup isf r-x--
+usb-syspopup ail::db rw---
+usb-syspopup sound_server rw---
+usb-syspopup dbus rwx--
+usb-syspopup org.tizen.add-viewer r-x--
+usb-syspopup pulseaudio rwxat
+usb-syspopup usb-server -w---
+usb-syspopup syspopup::db rw---
+usb-syspopup cbhm r----
+usb-syspopup sys-assert::core -wx--
+usb-syspopup system::share rwxat
+usb-syspopup mobileprint --x--
+usb-syspopup system::media rwxat
+usb-syspopup wrt_launchpad_daemon r----
+org.tizen.app-tray usb-syspopup r-x--
+e17 usb-syspopup -wx--

diff --git a/packaging/org.tizen.usbotg-syspopup.rule b/packaging/org.tizen.usbotg-syspopup.rule
new file mode 100644 (file)
index 0000000..a432c0d
--- /dev/null
+++ b/packaging/org.tizen.usbotg-syspopup.rule
@@ -0,0 +1,22 @@
+usbotg-syspopup device::app_logging -w---
+usbotg-syspopup system::homedir rwxat
+usbotg-syspopup system::use_internet r----
+usbotg-syspopup system::vconf rwxat
+usbotg-syspopup syspopup::db rw---
+usbotg-syspopup xorg rw---
+usbotg-syspopup sound_server rw---
+usbotg-syspopup power_manager -w---
+usbotg-syspopup deviced -w---
+usbotg-syspopup isf r-x--
+usbotg-syspopup ail::db rw---
+usbotg-syspopup dbus rwx--
+usbotg-syspopup org.tizen.add-viewer r-x--
+usbotg-syspopup pulseaudio rwxat
+usbotg-syspopup cbhm r----
+usbotg-syspopup system::share rwxat
+usbotg-syspopup mobileprint --x--
+usbotg-syspopup system::media rwxat
+usbotg-syspopup sys-assert::core -wx--
+usbotg-syspopup wrt_launchpad_daemon r----
+org.tizen.app-tray usbotg-syspopup r-x--
+e17 usbotg-syspopup -wx--

diff --git a/packaging/system-popup.spec b/packaging/system-popup.spec
index aafb798..5069692 100755 (executable)
--- a/packaging/system-popup.spec
+++ b/packaging/system-popup.spec
@@ -11,6 +11,12 @@ Source1003:    org.tizen.lowbat-syspopup.manifest
 Source1004:    org.tizen.mmc-syspopup.manifest
 Source1005:    org.tizen.usb-syspopup.manifest
 Source1006:    org.tizen.usbotg-syspopup.manifest
+Source1007:    org.tizen.poweroff-syspopup.rule
+Source1008:    org.tizen.lowmem-syspopup.rule
+Source1009:    org.tizen.lowbat-syspopup.rule
+Source1010:    org.tizen.mmc-syspopup.rule
+Source1011:    org.tizen.usb-syspopup.rule
+Source1012:    org.tizen.usbotg-syspopup.rule
 BuildRequires:  pkgconfig(evas)
 BuildRequires:  pkgconfig(ecore-input)
 BuildRequires:  pkgconfig(ethumb)
@@ -100,6 +106,12 @@ cp %{SOURCE1003} .
 cp %{SOURCE1004} .
 cp %{SOURCE1005} .
 cp %{SOURCE1006} .
+cp %{SOURCE1007} .
+cp %{SOURCE1008} .
+cp %{SOURCE1009} .
+cp %{SOURCE1010} .
+cp %{SOURCE1011} .
+cp %{SOURCE1012} .
 
 cmake . -DCMAKE_INSTALL_PREFIX=%{_prefix}
 make %{?jobs:-j%jobs}
@@ -124,6 +136,7 @@ vconftool set -t int db/setting/select_popup_btn "0" -u 5000 -f
 /usr/share/packages/org.tizen.poweroff-syspopup.xml
 /usr/share/process-info/poweroff-popup.ini
 /usr/apps/org.tizen.poweroff-syspopup/res/locale/*/LC_MESSAGES/*.mo
+/opt/etc/smack/accesses.d/org.tizen.poweroff-syspopup.rule
 
 %files -n org.tizen.lowmem-syspopup
 %manifest org.tizen.lowmem-syspopup.manifest
@@ -135,6 +148,7 @@ vconftool set -t int db/setting/select_popup_btn "0" -u 5000 -f
 /usr/share/packages/org.tizen.lowmem-syspopup.xml
 /usr/share/process-info/lowmem-popup.ini
 /usr/apps/org.tizen.lowmem-syspopup/res/locale/*/LC_MESSAGES/*.mo
+/opt/etc/smack/accesses.d/org.tizen.lowmem-syspopup.rule
 
 %files -n org.tizen.lowbat-syspopup
 %manifest org.tizen.lowbat-syspopup.manifest
@@ -145,6 +159,7 @@ vconftool set -t int db/setting/select_popup_btn "0" -u 5000 -f
 /usr/apps/org.tizen.lowbat-syspopup/res/icon/org.tizen.lowbat-syspopup.png
 /usr/share/packages/org.tizen.lowbat-syspopup.xml
 /usr/share/process-info/lowbatt-popup.ini
+/opt/etc/smack/accesses.d/org.tizen.lowbat-syspopup.rule
 
 %files -n org.tizen.mmc-syspopup
 %manifest org.tizen.mmc-syspopup.manifest
@@ -153,6 +168,7 @@ vconftool set -t int db/setting/select_popup_btn "0" -u 5000 -f
 /usr/share/packages/org.tizen.mmc-syspopup.xml
 /usr/share/process-info/mmc-popup.ini
 /usr/apps/org.tizen.mmc-syspopup/res/locale/*/LC_MESSAGES/*.mo
+/opt/etc/smack/accesses.d/org.tizen.mmc-syspopup.rule
 
 %files -n org.tizen.usb-syspopup
 %manifest org.tizen.usb-syspopup.manifest
@@ -160,9 +176,11 @@ vconftool set -t int db/setting/select_popup_btn "0" -u 5000 -f
 %attr(555,app,app) /usr/apps/org.tizen.usb-syspopup/bin/usb-syspopup
 %attr(440,app,app) /usr/apps/org.tizen.usb-syspopup/res/locale/*/LC_MESSAGES/usb-syspopup.mo
 /usr/share/packages/org.tizen.usb-syspopup.xml
+/opt/etc/smack/accesses.d/org.tizen.usb-syspopup.rule
 
 %files -n org.tizen.usbotg-syspopup
 %manifest org.tizen.usbotg-syspopup.manifest
 %defattr(440,root,root,-)
 %attr(555,app,app) /usr/apps/org.tizen.usbotg-syspopup/bin/usbotg-syspopup
 /usr/share/packages/org.tizen.usbotg-syspopup.xml
+/opt/etc/smack/accesses.d/org.tizen.usbotg-syspopup.rule

diff --git a/poweroff-popup/CMakeLists.txt b/poweroff-popup/CMakeLists.txt
index 3dd85b0..a7f9f1f 100755 (executable)
--- a/poweroff-popup/CMakeLists.txt
+++ b/poweroff-popup/CMakeLists.txt
@@ -61,6 +61,9 @@ INSTALL(FILES ${CMAKE_SOURCE_DIR}/data/org.tizen.poweroff-syspopup.xml DESTINATI
 # install ini file
 INSTALL(FILES ${CMAKE_SOURCE_DIR}/data/${PROJECT_NAME}.ini DESTINATION /usr/share/process-info)
 
+# instatll rule file
+INSTALL(FILES ${CMAKE_SOURCE_DIR}/org.tizen.poweroff-syspopup.rule DESTINATION /opt/etc/smack/accesses.d)
+
 # i18n
 ADD_SUBDIRECTORY(po_poweroff)
 

diff --git a/usb-popup/CMakeLists.txt b/usb-popup/CMakeLists.txt
index e179011..7ea58e5 100644 (file)
--- a/usb-popup/CMakeLists.txt
+++ b/usb-popup/CMakeLists.txt
@@ -44,4 +44,7 @@ INSTALL(TARGETS ${PACKAGE} DESTINATION ${BINDIR})
 # install manifest file
 INSTALL(FILES ${CMAKE_SOURCE_DIR}/data/${PKGNAME}.xml DESTINATION ${MANIFESTDIR})
 
+# instatll rule file
+INSTALL(FILES ${CMAKE_SOURCE_DIR}/org.tizen.usb-syspopup.rule DESTINATION /opt/etc/smack/accesses.d)
+
 ADD_SUBDIRECTORY(po)

diff --git a/usbotg-popup/CMakeLists.txt b/usbotg-popup/CMakeLists.txt
index 280586a..49ce34c 100755 (executable)
--- a/usbotg-popup/CMakeLists.txt
+++ b/usbotg-popup/CMakeLists.txt
@@ -41,3 +41,6 @@ INSTALL(TARGETS ${PACKAGE} DESTINATION ${BINDIR})
 
 # install manifest xml file
 INSTALL(FILES ${CMAKE_SOURCE_DIR}/data/${PKGNAME}.xml DESTINATION ${MANIFESTDIR})
+
+# instatll rule file
+INSTALL(FILES ${CMAKE_SOURCE_DIR}/org.tizen.usbotg-syspopup.rule DESTINATION /opt/etc/smack/accesses.d)