Fix Smack label on "app" home directory

Since weston-launch is now running with the "User" Smack label and runs
in the systemd user session, it must have access to /opt/home/app.

The simplest fix for now is to set the label in the kickstart file.

Change-Id: I7d920be8bee2a4a22505d496bae90980314e9ec9
Signed-off-by: Patrick McCarty <patrick.mccarty@linux.intel.com>

diff --git a/packaging/meta-ivi.changes b/packaging/meta-ivi.changes
index 2cbdb0f..165c79a 100644 (file)
--- a/packaging/meta-ivi.changes
+++ b/packaging/meta-ivi.changes
@@ -1,3 +1,6 @@
+* Fri Nov 22 2013 Patrick McCarty <patrick.mccarty@linux.intel.com> fec3e72
+- Fix Smack label on "app" home directory
+
 * Thu Oct  3 22:38:05 UTC 2013 - tracy.graydon@intel.com
 - TIVI-1557: attr and which are already in meta-common. Removing from ivi-middleware.
 

diff --git a/scripts/base-weston-default.post b/scripts/base-weston-default.post
index 34ed1bd..f3ec195 100644 (file)
--- a/scripts/base-weston-default.post
+++ b/scripts/base-weston-default.post
@@ -8,6 +8,10 @@ pkg_initdb
 # directory being only readable by root
 chown -R app:app /opt/home/app
 
+# Since weston-launch runs with the "User" label, the app
+# home dir must have the same label
+chsmack -a User /opt/home/app
+
 # base-weston-default.post
 mkdir -p /usr/lib/systemd/system/graphical.target.wants
 ln -sf ../user-session@.service /usr/lib/systemd/system/graphical.target.wants/user-session@5000.service