Modification about smack label of db file belong to process. 70/20570/2 accepted/tizen_3.0.2014.q3_common accepted/tizen_3.0.m14.3_ivi tizen_3.0.2014.q3_common tizen_3.0.2014.q4_common tizen_3.0.2015.q1_common tizen_3.0.m14.2_ivi tizen_3.0.m14.3_ivi tizen_3.0.m1_mobile tizen_3.0.m1_tv tizen_3.0_ivi accepted/tizen/common/20140519.224111 accepted/tizen/ivi/20140604.064640 submit/tizen/20140516.060805 submit/tizen_common/20151015.190624 submit/tizen_common/20151019.135620 submit/tizen_common/20151023.083358 submit/tizen_common/20151026.085049 submit/tizen_mobile/20141120.000000 tizen_3.0.2014.q3_common_release tizen_3.0.m14.2_ivi_release tizen_3.0.m14.3_ivi_release tizen_3.0.m1_mobile_release tizen_3.0.m1_tv_release tizen_3.0.m2.a1_mobile_release tizen_3.0.m2.a1_tv_release tizen_3.0_ivi_release
authorjooseong.lee <jooseong.lee@samsung.com>
Fri, 9 May 2014 09:05:49 +0000 (18:05 +0900)
committerjooseong lee <jooseong.lee@samsung.com>
Fri, 9 May 2014 09:05:33 +0000 (02:05 -0700)
[Problem]
Most db files have 'floor' label.  Because these are created when binary is built.
No process can write db (since 'floor' label allows only read and execute)

[Solution]
Modify smack label based on below condition and three domain model
Condition1. Assign domain of process creates db files
Condition2. Assign domain of process uses db files.

Change-Id: I8668afceb84a1f1d68b2714e5d0ca6c64f23b6e4
Signed-off-by: jooseong.lee <jooseong.lee@samsung.com>
packaging/syspopup.manifest

index c00c25b..8a4d6e2 100644 (file)
@@ -2,4 +2,7 @@
         <request>
                 <domain name="_" />
         </request>
+       <assign>
+               <filesystem path="/opt/dbspace/.syspopup.db*" label="System" />
+       </assign>
 </manifest>