Apply dbus-cynara rule for deviced

dbus method call which has privilege only allowed

Change-Id: I85e7056d6097130db8ab56ddd91f2a21f38d4e13
Signed-off-by: pr.jung <pr.jung@samsung.com>

diff --git a/scripts/deviced.conf b/scripts/deviced.conf
index 51ca6a0..a5846bd 100644 (file)
--- a/scripts/deviced.conf
+++ b/scripts/deviced.conf
@@ -4,13 +4,37 @@
     <policy user="root">
         <allow own="org.tizen.system.deviced"/>
         <allow send_destination="org.tizen.system.deviced"/>
-        <allow send_interface="org.tizen.system.deviced.display"/>
-    </policy>
-    <policy at_console="true">
-        <allow send_destination="org.tizen.system.deviced"/>
     </policy>
+
     <policy context="default">
-        <deny own="org.tizen.system.deviced"/>
-        <allow send_destination="org.tizen.system.deviced"/>
+        <deny send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.display"/>
+        <deny send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.power"/>
+        <deny send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.storage"/>
+        <deny send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.led"/>
+        <deny send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.haptic"/>
+
+        <check send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.display"
+                privilege="http://tizen.org/privilege/display"/>
+        <check send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.power"
+                privilege="http://tizen.org/privilege/power"/>
+        <check send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.storage"
+                privilege="http://tizen.org/privilege/externalstorage"/>
+        <check send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.storage"
+                privilege="http://tizen.org/privilege/mediastorage"/>
+        <check send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.led"
+                privilege="http://tizen.org/privilege/led"/>
+        <check send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.haptic"
+                privilege="http://tizen.org/privilege/haptic"/>
     </policy>
 </busconfig>