From: Youngsoo Choi <kenshin.choi@samsung.com>
Date: Mon, 21 Dec 2020 04:13:36 +0000 (-0800)
Subject: [Service] Drop privilege of hybrid web app
X-Git-Tag: submit/tizen_6.0/20201222.052907^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=b6fb0473f89c041f11dfb527dfaafefd4d37bc8a;p=platform%2Fframework%2Fweb%2Fwrtjs.git

[Service] Drop privilege of hybrid web app

The hybrid web app should have smack label "User::Pkg::$pkg_id::App::$app_id".

Tizen security reference:
https://wiki.tizen.org/Security:TizenSmackReferencePolicy#label_of_applications

Together with:
https://review.tizen.org/gerrit/250122

Change-Id: I63e386d949fef6665a8c7bd8b9d6dcba8f7c825f
Signed-off-by: Youngsoo Choi <kenshin.choi@samsung.com>
---

diff --git a/wrt_app/service/access_control_manager.ts b/wrt_app/service/access_control_manager.ts
index e3621a02..ae6883a7 100644
--- a/wrt_app/service/access_control_manager.ts
+++ b/wrt_app/service/access_control_manager.ts
@@ -21,8 +21,8 @@ function isNetworkModule(module: string) {
   return false;
 }
 
-export function initialize(packageId:string, permissions: string[]) {
-  wrt.security?.dropThreadPrivilege(packageId);
+export function initialize(packageId:string, appId:string, permissions: string[]) {
+  wrt.security?.dropThreadPrivilege(packageId, appId);
   let tizen = global.tizen;
   if (!permissions.includes("http://tizen.org/privilege/alarm")) {
     tizen.alarm.add =
diff --git a/wrt_app/service/device_api_router.ts b/wrt_app/service/device_api_router.ts
index f74f15eb..fd5cf846 100644
--- a/wrt_app/service/device_api_router.ts
+++ b/wrt_app/service/device_api_router.ts
@@ -204,7 +204,7 @@ export class DeviceAPIRouter {
   initAccessControlManager() {
     console.log(`permissions : ${this.permissions}`);
     const AccessControlManager = require('./access_control_manager');
-    AccessControlManager.initialize(this.packageId, this.permissions);
+    AccessControlManager.initialize(this.packageId, this.serviceId, this.permissions);
   }
 
   refineResolveFilename() {