Add 'l' permission to sharedRO Smack rule 52/96752/2
authorjooseong lee <jooseong.lee@samsung.com>
Thu, 10 Nov 2016 05:16:08 +0000 (14:16 +0900)
committerjooseong lee <jooseong.lee@samsung.com>
Fri, 11 Nov 2016 05:48:46 +0000 (21:48 -0800)
DB in shared/data cannot be accessed by other applications.
File lock permission is also needed.

Change-Id: I90f05fabfa2e4a62df8a3e1c40a48c341ecb86f2
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>
src/common/smack-rules.cpp

index 762b422..6cf2bbb 100644 (file)
@@ -60,7 +60,7 @@ const std::string SMACK_RULES_PATH_MERGED_T    = LOCAL_STATE_DIR "/security-mana
 const std::string SMACK_RULES_PATH             = LOCAL_STATE_DIR "/security-manager/rules";
 const std::string SMACK_RULES_SHARED_RO_PATH   = LOCAL_STATE_DIR "/security-manager/rules/shared_ro";
 const std::string SMACK_APP_IN_PACKAGE_PERMS   = "rwxat";
-const std::string SMACK_APP_CROSS_PKG_PERMS    = "rx";
+const std::string SMACK_APP_CROSS_PKG_PERMS    = "rxl";
 const std::string SMACK_APP_PATH_OWNER_PERMS = "rwxat";
 const std::string SMACK_APP_PATH_TARGET_PERMS = "rxl";
 const std::string SMACK_APP_DIR_TARGET_PERMS = "x";