Apply Tizen 3.0 security policy

Signed-off-by: Ji-hoon Jung <jh8801.jung@samsung.com>
Change-Id: I5786827305134a445a79690bdef19917f546849c

diff --git a/nfc-manager.manifest b/nfc-manager.manifest
index 24771db..4d85805 100644 (file)
--- a/nfc-manager.manifest
+++ b/nfc-manager.manifest
@@ -1,97 +1,6 @@
 <manifest>
-       <define>
-               <domain name="nfc-manager" />
-               <provide>
-                       <label name="nfc-manager::admin" />
-                       <label name="nfc-manager::card_emul" />
-                       <label name="nfc-manager::common" />
-                       <label name="nfc-manager::p2p" />
-                       <label name="nfc-manager::tag" />
-               </provide>
-               <request>
-                       <smack request="bt-service::admin" type="w"/>
-                       <smack request="bt-service::gap" type="w"/>
-                       <smack request="connman::set" type="rw"/>
-                       <smack request="connman::get" type="rw"/>
-                       <smack request="device::nfc" type="rw"/>
-                       <smack request="deviced::display" type="rw" />
-                       <smack request="key-storage::db" type="r"/>
-                       <smack request="nfc-manager::tag" type="rw"/>
-                       <smack request="nfc-manager::p2p" type="rw"/>
-                       <smack request="nfc-manager::admin" type="rw"/>
-                       <smack request="nfc-manager::card_emul" type="rw"/>
-                       <smack request="nfc-manager::common" type="rw"/>
-                       <smack request="secure-storage" type="w"/>
-                       <smack request="security-server::api-cookie-check" type="w"/>
-                       <smack request="smartcard-service" type="rwx" />
-                       <smack request="smartcard-service::priv" type="rwx" />
-                       <smack request="sys-assert::core" type="rwxat" />
-                       <smack request="system::vconf" type="rwxat" />
-                       <smack request="system::vconf_inhouse" type="rw"/>
-                       <smack request="system::vconf_network" type="rw"/>
-                       <smack request="telephony_framework::api_ps_public" type="rw"/>
-                       <smack request="tizen::vconf::nfc" type="rw"/>
-                       <smack request="tizen::vconf::nfc::admin" type="rw"/>
-                       <smack request="tizen::vconf::platform::rw" type="rw"/>
-                       <smack request="tizen::vconf::public::r::platform::rw" type="rw"/>
-                       <smack request="tizen::vconf::telephony::admin" type="r"/>
-               </request>
-       </define>
-       <assign>
-               <filesystem path="/opt/usr/share/nfc-manager-daemon" exec_label="nfc-manager" />
-               <filesystem path="/usr/bin/nfc-manager-daemon" exec_label="nfc-manager" />
-               <filesystem path="/etc/init.d/libnfc-manager-0" label="_" exec_label="none" />
-               <!-- <filesystem path="/etc/rc.d/rc3.d/S81libnfc-manager-0" label="_" exec_label="none" /> -->
-               <!-- <filesystem path="/etc/rc.d/rc5.d/S81libnfc-manager-0" label="_" exec_label="none" /> -->
-               <filesystem path="/usr/share/dbus-1/system-services/nfc-manager.service" label="_" />
-               <filesystem path="/usr/lib/systemd/system/nfc-manager.service" label="_" />
-               <filesystem path="/usr/lib/systemd/system/multi-user.target.wants/nfc-manager.service" label="_" />
-               <filesystem path="/opt/usr/share/nfc-manager-daemon/*" label="nfc-manager" />
-               <filesystem path="/opt/usr/data/nfc-manager-daemon/*" label="nfc-manager" />
-               <dbus name="org.tizen.NetNfcService" own="nfc-manager" bus="system">
-                       <node name="/org/tizen/NetNfcService/*">
-                               <interface name="org.tizen.NetNfcService.Manager">
-                                       <signal name="Activated">
-                                               <annotation name="org.tizen.smack" value="nfc-manager::admin" />
-                                       </signal>
-                               </interface>
-                               <interface name="org.tizen.NetNfcService.P2p">
-                                       <signal name="Detached">
-                                               <annotation name="org.tizen.smack" value="nfc-manager::p2p" />
-                                       </signal>
-                                       <signal name="Discovered">
-                                               <annotation name="org.tizen.smack" value="nfc-manager::p2p" />
-                                       </signal>
-                                       <signal name="Received">
-                                               <annotation name="org.tizen.smack" value="nfc-manager::p2p" />
-                                       </signal>
-                               </interface>
-                               <interface name="org.tizen.NetNfcService.Tag">
-                                       <signal name="TagDiscovered">
-                                               <annotation name="org.tizen.smack" value="nfc-manager::tag" />
-                                       </signal>
-                                       <signal name="TagDetached">
-                                               <annotation name="org.tizen.smack" value="nfc-manager::tag" />
-                                       </signal>
-                               </interface>
-                               <interface name="org.tizen.NetNfcService.Ndef">
-                                       <signal name="Error">
-                                               <annotation name="org.tizen.smack" value="nfc-manager::tag" />
-                                       </signal>
-                                       <signal name="Incoming">
-                                               <annotation name="org.tizen.smack" value="nfc-manager::tag" />
-                                       </signal>
-                               </interface>
-                               <interface name="org.tizen.NetNfcService.Snep">
-                                       <signal name="SnepEvent">
-                                               <annotation name="org.tizen.smack" value="nfc-manager::p2p" />
-                                       </signal>
-                               </interface>
-                       </node>
-               </dbus>
-       </assign>
-       <request>
-               <domain name="nfc-manager" />
-       </request>
+        <request>
+                <domain name="_" />
+        </request>
 </manifest>
 

diff --git a/packaging/nfc-manager.service b/packaging/nfc-manager.service
index 72908a5..62f8637 100755 (executable)
--- a/packaging/nfc-manager.service
+++ b/packaging/nfc-manager.service
@@ -9,7 +9,6 @@ Type=simple
 ExecStart=/usr/bin/nfc-manager-daemon --daemon
 KillSignal=SIGKILL
 MemoryLimit=30M
-SmackProcessLabel=nfc-manager
 
 [Install]
 WantedBy=multi-user.target

diff --git a/packaging/nfc-manager.spec b/packaging/nfc-manager.spec
index e6f44ae..7d3703a 100755 (executable)
--- a/packaging/nfc-manager.spec
+++ b/packaging/nfc-manager.spec
@@ -119,19 +119,15 @@ install -D -m 0644 LICENSE.Flora  %{buildroot}/%{_datadir}/license/nfc-client-li
 /sbin/ldconfig
 
 mkdir -p -m 700 /opt/usr/data/nfc-manager-daemon
-/usr/bin/chsmack -a nfc-manager /opt/usr/data/nfc-manager-daemon
 chown system:system /opt/usr/data/nfc-manager-daemon
 
 mkdir -p -m 744 /opt/usr/share/nfc_debug
-/usr/bin/chsmack -a nfc-manager /opt/usr/share/nfc_debug
 chown system:system /opt/usr/share/nfc_debug
 
 mkdir -p -m 744 /opt/usr/share/nfc-manager-daemon
-/usr/bin/chsmack -a nfc-manager /opt/usr/share/nfc-manager-daemon
 chown system:system /opt/usr/share/nfc-manager-daemon
 
 mkdir -p -m 744 /opt/usr/share/nfc-manager-daemon/message
-/usr/bin/chsmack -a nfc-manager /opt/usr/share/nfc-manager-daemon/message
 chown system:system /opt/usr/share/nfc-manager-daemon/message
 
 systemctl daemon-reload