From: Jin-gyu Kim Date: Mon, 3 May 2021 08:13:19 +0000 (+0900) Subject: Add missing SMACK labelling cmd in change_permission. X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=a01b4885dc42bc930539ef04a1f4349dfc167f5c;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git Add missing SMACK labelling cmd in change_permission. This does not affect any operation, but need to reset SMACK label for any mismatch in SMACK label. Change-Id: I0d6053c341d4070d25b7a0839ef439a4972ed424 --- diff --git a/config/change_permission b/config/change_permission index b111fde..c3e3569 100644 --- a/config/change_permission +++ b/config/change_permission @@ -29,8 +29,14 @@ done # change permission to /opt/var/lib/misc # This is needed to retrieve CAP_DAC_OVERRIDE from mobileap-agent & dnsmasq. -if [ -e /opt/var/lib/misc ] +if [ -e "/opt/var/lib/misc" ] then chown root:system_share /opt/var/lib/misc chmod 0775 /opt/var/lib/misc fi + +# Set SMACK label as "System::Privileged" in /opt/var/security-manager/rules +if [ -e "/opt/var/security-manager/rules" ] +then + chsmack -r -a "System::Privileged" /opt/var/security-manager/rules +fi