Since SMACK only allows three labels, "_"(floor), "User", "System"
The labels of current rule file are not appropriate
Solution:
- Remove rule file (packaging/system-server.rule)
- Remove install statement about installing rule file described in CMakeLists.txt
- Remove file path and name declaration of spec file (packaging/system-server.spec)
Reference site
https://wiki.tizen.org/wiki/Security:SmackThreeDomainModel
Change-Id: I55e2e1b34d35b5a8d2dc7328cbc763135663a598
Signed-off-by: seong.chung <seong.chung@samsung.com>
INSTALL(FILES ${MOVINAND_FORMAT} DESTINATION bin)
INSTALL(PROGRAMS ${CMAKE_BINARY_DIR}/device-daemon DESTINATION bin)
INSTALL(FILES system-server.conf DESTINATION /etc/dbus-1/system.d)
-INSTALL(FILES ${CMAKE_SOURCE_DIR}/packaging/system-server.rule DESTINATION /opt/etc/smack/accesses.d)
INSTALL(PROGRAMS ${CMAKE_CURRENT_SOURCE_DIR}/scripts/mmc-smack-label DESTINATION bin)
INSTALL(PROGRAMS ${CMAKE_CURRENT_SOURCE_DIR}/scripts/shutdown.sh DESTINATION ${LIB_INSTALL_DIR}/system-server)
INSTALL(PROGRAMS ${CMAKE_CURRENT_SOURCE_DIR}/utils/set_pmon DESTINATION bin)
+++ /dev/null
-deviced sys-assert::core rwxat
-deviced system::vconf rwxat
-deviced telephony_framework::api_manager r
-deviced telephony_framework::api_modem wx
-deviced data-provider-master::notification rw
-deviced data-provider-master::notification.client w
-pulseaudio deviced rw
%license LICENSE.APLv2
%config %{_sysconfdir}/dbus-1/system.d/system-server.conf
%{_bindir}/system_server
-/opt/etc/smack/accesses.d/system-server.rule
%{_libdir}/system-server/shutdown.sh
%if %{undefined simulator}
%{_bindir}/restart