From: Mu-Woong <muwoong.lee@samsung.com>
Date: Wed, 1 Jul 2015 13:25:17 +0000 (+0900)
Subject: Fix the manifest/service/spec files regarding 3.0's security policy
X-Git-Tag: submit/tizen_mobile/20150707.222741^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=a7ad507e2e708aa5752af7968ade2ce3abaf7be7;p=platform%2Fcore%2Fcontext%2Fcontext-service.git

Fix the manifest/service/spec files regarding 3.0's security policy

Change-Id: I9d38ce34e6af7c4ac30d7630878cd74d56c46008
Signed-off-by: Mu-Woong <muwoong.lee@samsung.com>
---

diff --git a/packaging/context-service.manifest b/packaging/context-service.manifest
index 2bd5615..97e8c31 100644
--- a/packaging/context-service.manifest
+++ b/packaging/context-service.manifest
@@ -1,63 +1,5 @@
 <manifest>
-	<define>
-		<domain name="context-service"/>
-		<permit>
-			<smack permit="dbus" type="rwx"/>
-		</permit>
-		<request>
-			<smack request="xorg" type="rw"/>
-			<smack request="security-server::api-cookie-check" type="w"/>
-			<smack request="security-server::api-app-privilege-by-name" type="rlw"/>
-			<smack request="security-server::api-permissions" type="rlw"/>
-			<smack request="vasum::manage" type="rw"/>
-			<smack request="sys-assert::core" type="rwxat"/>
-			<smack request="device::app_logging" type="rw"/>
-			<smack request="device::sys_logging" type="rw"/>
-			<smack request="deviced::display" type="rw"/>
-			<smack request="alarm-server::alarm" type="rw"/>
-			<smack request="libaccounts-svc" type="r"/>
-			<smack request="libaccounts-svc::db" type="rl"/>
-			<smack request="libaccounts-svc::check_read" type="r"/>
-			<smack request="telephony_framework::api_sim" type="r"/>
-			<smack request="telephony_framework::api_phonebook" type="rx"/>
-			<smack request="telephony_framework::properties" type="rw"/>
-			<smack request="connman::get" type="rw"/>
-			<smack request="connman::set" type="rw"/>
-			<smack request="connman::profile" type="rw"/>
-			<smack request="telephony_framework::api_ps_public" type="rw"/>
-			<smack request="telephony_framework::api_ps_profile" type="rw"/>
-			<smack request="telephony_framework::api_sms" type="rwx"/>
-			<smack request="telephony_framework::api_network" type="rwx"/>
-			<smack request="telephony_framework::api_call" type="rwx"/>
-			<smack request="privilege::tizen::telephony.admin" type="rw"/>
-			<smack request="privilege::tizen::telephony" type="rw"/>
-			<smack request="data-provider-master::notification" type="rwl"/>
-			<smack request="data-provider-master::notification.client" type="rw"/>
-			<smack request="aul::launch" type="x"/>
-			<smack request="privilege::tizen::call" type="rw"/>
-			<smack request="privilege::tizen::bluetooth" type="rw"/>
-			<smack request="privilege::tizen::network.get" type="rw"/>
-			<smack request="privilege::tizen::network.profile" type="rw"/>
-			<smack request="privilege::tizen::message.read" type="rw"/>
-			<smack request="msg-service" type="rwx"/>
-			<smack request="msg-service::db" type="r"/>
-			<smack request="msg-service::read" type="rw"/>
-			<smack request="privilege::tizen::message.write" type="rw"/>
-			<smack request="privilege::tizen::message.read" type="rw"/>
-			<smack request="msg-service::write" type="rw"/>
-			<smack request="msg-service::read" type="rw"/>
-			<smack request="app-svc::jump" type="x"/>
-			<smack request="tizen::vconf::message" type="r"/>
-			<smack request="tizen::vconf::setting::admin" type="rl"/>
-			<smack request="tizen::vconf::volume::set" type="rl"/>
-			<smack request="sound_server" type="rlwx"/>
-			<smack request="media-data::db" type="rlw"/>
-		</request>
-	</define>
 	<request>
-		<domain name="context-service"/>
+		<domain name="_"/>
 	</request>
-	<assign>
-		<filesystem path="/usr/bin/contextd" exec_label="context-service" label="context-service"/>
-	</assign>
 </manifest>
diff --git a/packaging/context-service.service b/packaging/context-service.service
index d8f8a21..5b5a845 100644
--- a/packaging/context-service.service
+++ b/packaging/context-service.service
@@ -5,7 +5,6 @@ Description=Contextual Service Framework Daemon
 Type=dbus
 User=system
 Group=system
-SmackProcessLabel=context-service
 BusName=org.tizen.context
 ExecStart=/usr/bin/contextd
 Restart=always
diff --git a/packaging/context-service.spec b/packaging/context-service.spec
index 5508ac7..e054daa 100644
--- a/packaging/context-service.spec
+++ b/packaging/context-service.spec
@@ -82,8 +82,8 @@ sqlite3 %{buildroot}/opt/dbspace/.context-service.db "CREATE TABLE VERSION (VERS
 sqlite3 %{buildroot}/opt/dbspace/.context-service.db "INSERT INTO VERSION VALUES ('%{version}');"
 install -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}
 cp LICENSE %{buildroot}%{_datadir}/license/%{name}
-sed -i "s/^\tversion=\".*\"/\tversion=\"%{version}\"/g" packaging/context-service.xml
-cp packaging/context-service.xml %{buildroot}%{_datadir}/packages/
+#sed -i "s/^\tversion=\".*\"/\tversion=\"%{version}\"/g" packaging/context-service.xml
+#cp packaging/context-service.xml %{buildroot}%{_datadir}/packages/
 cp data/access-config.xml %{buildroot}/opt/data/context-service/
 cp data/trigger-template.json %{buildroot}/opt/data/context-service/
 sh data/template-json-to-sql.sh data/trigger-template.json > %{buildroot}/opt/data/context-service/trigger-template.sql
@@ -93,7 +93,7 @@ install -m 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/dbus-1/system.d/
 
 %post
 sqlite3 -echo /opt/dbspace/.context-service.db < /opt/data/context-service/trigger-template.sql
-chsmack -a "context-service" /opt/dbspace/.context-service.db*
+#chsmack -a "context-service" /opt/dbspace/.context-service.db*
 mkdir -p %{_unitdir}/graphical.target.wants
 ln -s ../context-service.service %{_unitdir}/graphical.target.wants/
 /sbin/ldconfig
@@ -112,11 +112,11 @@ systemctl daemon-reload
 %files
 %manifest packaging/%{name}.manifest
 %config %{_sysconfdir}/dbus-1/system.d/*
-%defattr(-,root,root,-)
+#%defattr(-,root,root,-)
 %{_bindir}/*
 %{_unitdir}/context-service.service
 %{_datadir}/license/%{name}
-%{_datadir}/packages/*.xml
+#%{_datadir}/packages/*.xml
 %defattr(0600,system,system,-)
 /opt/data/context-service/*
 %config(noreplace) /opt/dbspace/.context-service.db*