From: Jin-gyu Kim <jin-gyu.kim@samsung.com>
Date: Mon, 30 May 2022 07:52:57 +0000 (+0900)
Subject: Change Smack Process Label of pkg-db-recovery & package-recovery services
X-Git-Tag: submit/tizen/20220531.074151^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=ba1a286c0b52bb81117c59125df9948ea9e675d7;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git

Change Smack Process Label of pkg-db-recovery & package-recovery services

- To use cap_mac_override used by installer cmd (ex : tpk-backend),
  System::Privileged is required for these services.

Change-Id: I8d7bff03e50e6110da3b5e940d11f219325efd01
---

diff --git a/test/new_service_test/emulator/common/systemd_service.list b/test/new_service_test/emulator/common/systemd_service.list
index 027f542..2ce6365 100755
--- a/test/new_service_test/emulator/common/systemd_service.list
+++ b/test/new_service_test/emulator/common/systemd_service.list
@@ -116,11 +116,11 @@
 ;offline-update.service;root;root;System::Privileged;
 ;opt-usr-fsck.service;system_fw;disk;System;
 ;package-manager.service;app_fw;app_fw;System::Privileged;
-;package-recovery.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System::Privileged;
 ;pass.service;system_fw;system_fw;System;
 ;peripheral-bus.service;system_fw;system_fw;System;
 ;phonenumber-utils.service;service_fw;service_fw;System;
-;pkg-db-recovery.service;root;root;System;
+;pkg-db-recovery.service;root;root;System::Privileged;
 ;pkgdir-tool.service;app_fw;app_fw;System;
 ;pkgmgr-info.service;app_fw;app_fw;System;
 ;privacy-guard-server.service;security_fw;security_fw;System;
diff --git a/test/new_service_test/emulator/iot/systemd_service.list b/test/new_service_test/emulator/iot/systemd_service.list
index 0f4a837..577947b 100755
--- a/test/new_service_test/emulator/iot/systemd_service.list
+++ b/test/new_service_test/emulator/iot/systemd_service.list
@@ -117,11 +117,11 @@
 ;offline-update.service;root;root;System::Privileged;
 ;opt-usr-fsck.service;system_fw;disk;System;
 ;package-manager.service;app_fw;app_fw;System::Privileged;
-;package-recovery.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System::Privileged;
 ;pass.service;system_fw;system_fw;System;
 ;peripheral-bus.service;system_fw;system_fw;System;
 ;phonenumber-utils.service;service_fw;service_fw;System;
-;pkg-db-recovery.service;root;root;System;
+;pkg-db-recovery.service;root;root;System::Privileged;
 ;pkgdir-tool.service;app_fw;app_fw;System;
 ;pkgmgr-info.service;app_fw;app_fw;System;
 ;privacy-guard-server.service;security_fw;security_fw;System;
diff --git a/test/new_service_test/emulator/mobile/systemd_service.list b/test/new_service_test/emulator/mobile/systemd_service.list
index 13ee9cd..d7a4ccd 100755
--- a/test/new_service_test/emulator/mobile/systemd_service.list
+++ b/test/new_service_test/emulator/mobile/systemd_service.list
@@ -116,11 +116,11 @@
 ;offline-update.service;root;root;System::Privileged;
 ;opt-usr-fsck.service;system_fw;disk;System;
 ;package-manager.service;app_fw;app_fw;System::Privileged;
-;package-recovery.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System::Privileged;
 ;pass.service;system_fw;system_fw;System;
 ;peripheral-bus.service;system_fw;system_fw;System;
 ;phonenumber-utils.service;service_fw;service_fw;System;
-;pkg-db-recovery.service;root;root;System;
+;pkg-db-recovery.service;root;root;System::Privileged;
 ;pkgdir-tool.service;app_fw;app_fw;System;
 ;pkgmgr-info.service;app_fw;app_fw;System;
 ;privacy-guard-server.service;security_fw;security_fw;System;
diff --git a/test/new_service_test/emulator/wearable/systemd_service.list b/test/new_service_test/emulator/wearable/systemd_service.list
index a68e2ad..e263e7c 100644
--- a/test/new_service_test/emulator/wearable/systemd_service.list
+++ b/test/new_service_test/emulator/wearable/systemd_service.list
@@ -111,11 +111,11 @@
 ;offline-update.service;root;root;System::Privileged;
 ;opt-usr-fsck.service;system_fw;disk;System;
 ;package-manager.service;app_fw;app_fw;System::Privileged;
-;package-recovery.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System::Privileged;
 ;pass.service;system_fw;system_fw;System;
 ;peripheral-bus.service;system_fw;system_fw;System;
 ;phonenumber-utils.service;service_fw;service_fw;System;
-;pkg-db-recovery.service;root;root;System;
+;pkg-db-recovery.service;root;root;System::Privileged;
 ;pkgdir-tool.service;app_fw;app_fw;System;
 ;pkgmgr-info.service;app_fw;app_fw;System;
 ;privacy-guard-server.service;security_fw;security_fw;System;
diff --git a/test/new_service_test/target/common/systemd_service.list b/test/new_service_test/target/common/systemd_service.list
index 2e7cb33..03c3066 100644
--- a/test/new_service_test/target/common/systemd_service.list
+++ b/test/new_service_test/target/common/systemd_service.list
@@ -124,11 +124,11 @@
 ;offline-update.service;root;root;System::Privileged;
 ;opt-usr-fsck.service;system_fw;disk;System;
 ;package-manager.service;app_fw;app_fw;System::Privileged;
-;package-recovery.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System::Privileged;
 ;pass.service;system_fw;system_fw;System;
 ;peripheral-bus.service;system_fw;system_fw;System;
 ;phonenumber-utils.service;service_fw;service_fw;System;
-;pkg-db-recovery.service;root;root;System;
+;pkg-db-recovery.service;root;root;System::Privileged;
 ;pkgdir-tool.service;app_fw;app_fw;System;
 ;pkgmgr-info.service;app_fw;app_fw;System;
 ;privacy-guard-server.service;security_fw;security_fw;System;
diff --git a/test/new_service_test/target/iot/systemd_service.list b/test/new_service_test/target/iot/systemd_service.list
index b924d60..52be10b 100644
--- a/test/new_service_test/target/iot/systemd_service.list
+++ b/test/new_service_test/target/iot/systemd_service.list
@@ -126,11 +126,11 @@
 ;offline-update.service;root;root;System::Privileged;
 ;opt-usr-fsck.service;system_fw;disk;System;
 ;package-manager.service;app_fw;app_fw;System::Privileged;
-;package-recovery.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System::Privileged;
 ;pass.service;system_fw;system_fw;System;
 ;peripheral-bus.service;system_fw;system_fw;System;
 ;phonenumber-utils.service;service_fw;service_fw;System;
-;pkg-db-recovery.service;root;root;System;
+;pkg-db-recovery.service;root;root;System::Privileged;
 ;pkgdir-tool.service;app_fw;app_fw;System;
 ;pkgmgr-info.service;app_fw;app_fw;System;
 ;privacy-guard-server.service;security_fw;security_fw;System;
diff --git a/test/new_service_test/target/mobile/systemd_service.list b/test/new_service_test/target/mobile/systemd_service.list
index 2a4e3dd..c7a003c 100644
--- a/test/new_service_test/target/mobile/systemd_service.list
+++ b/test/new_service_test/target/mobile/systemd_service.list
@@ -125,11 +125,11 @@
 ;offline-update.service;root;root;System::Privileged;
 ;opt-usr-fsck.service;system_fw;disk;System;
 ;package-manager.service;app_fw;app_fw;System::Privileged;
-;package-recovery.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System::Privileged;
 ;pass.service;system_fw;system_fw;System;
 ;peripheral-bus.service;system_fw;system_fw;System;
 ;phonenumber-utils.service;service_fw;service_fw;System;
-;pkg-db-recovery.service;root;root;System;
+;pkg-db-recovery.service;root;root;System::Privileged;
 ;pkgdir-tool.service;app_fw;app_fw;System;
 ;pkgmgr-info.service;app_fw;app_fw;System;
 ;privacy-guard-server.service;security_fw;security_fw;System;
diff --git a/test/new_service_test/target/tv/systemd_service.list b/test/new_service_test/target/tv/systemd_service.list
index 189adca..316368f 100644
--- a/test/new_service_test/target/tv/systemd_service.list
+++ b/test/new_service_test/target/tv/systemd_service.list
@@ -108,11 +108,11 @@
 ;offline-update.service;root;root;System::Privileged;
 ;opt-usr-fsck.service;system_fw;disk;System;
 ;package-manager.service;app_fw;app_fw;System::Privileged;
-;package-recovery.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System::Privileged;
 ;pass.service;system_fw;system_fw;System;
 ;peripheral-bus.service;system_fw;system_fw;System;
 ;phonenumber-utils.service;service_fw;service_fw;System;
-;pkg-db-recovery.service;root;root;System;
+;pkg-db-recovery.service;root;root;System::Privileged;
 ;pkgdir-tool.service;app_fw;app_fw;System;
 ;pkgmgr-info.service;app_fw;app_fw;System;
 ;privacy-guard-server.service;security_fw;security_fw;System;
diff --git a/test/new_service_test/target/wearable/systemd_service.list b/test/new_service_test/target/wearable/systemd_service.list
index 309115d..789e6ec 100755
--- a/test/new_service_test/target/wearable/systemd_service.list
+++ b/test/new_service_test/target/wearable/systemd_service.list
@@ -118,11 +118,11 @@
 ;offline-update.service;root;root;System::Privileged;
 ;opt-usr-fsck.service;system_fw;disk;System;
 ;package-manager.service;app_fw;app_fw;System::Privileged;
-;package-recovery.service;app_fw;app_fw;System;
+;package-recovery.service;app_fw;app_fw;System::Privileged;
 ;pass.service;system_fw;system_fw;System;
 ;peripheral-bus.service;system_fw;system_fw;System;
 ;phonenumber-utils.service;service_fw;service_fw;System;
-;pkg-db-recovery.service;root;root;System;
+;pkg-db-recovery.service;root;root;System::Privileged;
 ;pkgdir-tool.service;app_fw;app_fw;System;
 ;pkgmgr-info.service;app_fw;app_fw;System;
 ;privacy-guard-server.service;security_fw;security_fw;System;