From: Kidong Kim Date: Thu, 1 Nov 2012 07:17:12 +0000 (+0900) Subject: remove admin group X-Git-Tag: 2.1b_release~12^2^2~80 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=e6db7b83c6adf60779c16a1321b05c25797a9983;p=platform%2Fcore%2Fsecurity%2Flibprivilege-control.git remove admin group --- diff --git a/group b/group index e2b1d5d..efa74ec 100644 --- a/group +++ b/group @@ -69,7 +69,6 @@ db_wrt:x:6026:app camera:x:6501:app,media message:x:6502:app myfiles:x:6503:app -admin:x:6504: pulse:x:6507: pulse-access:x:6505:root,app,media pulse-rt:x:6506:root,app,media diff --git a/packaging/libprivilege-control.spec b/packaging/libprivilege-control.spec index 2729b2c..380cdff 100644 --- a/packaging/libprivilege-control.spec +++ b/packaging/libprivilege-control.spec @@ -2,7 +2,7 @@ Name: libprivilege-control Summary: Library to control privilege of application -Version: 0.0.12 +Version: 0.0.13 Release: 1 Group: System/Security License: Apache 2.0 diff --git a/smack_default_labeling b/smack_default_labeling index 3d4334f..4a15401 100644 --- a/smack_default_labeling +++ b/smack_default_labeling @@ -4,6 +4,9 @@ chown 5000:5000 /home/app find /home/app -print0 | xargs -0 chsmack -a 'system::homedir' find /home/app -type d -print0 | xargs -0 chsmack -t +chsmack -a 'system::vconf' /opt/var/kdb/db +chsmack -t /opt/var/kdb/db + # set vconf label when first boot if [ ! -e /opt/etc/.vconf_labeling ]; then find /opt/var/kdb/db -print0 | xargs -0 chsmack -a 'system::vconf' @@ -68,7 +71,7 @@ chsmack -a 'aul::db' /opt/dbspace/.mida.db* chsmack -a 'wrt-commons::db_wrt' /opt/dbspace/.wrt.db* chsmack -a 'wrt-commons::db_wrt_autosave' /opt/dbspace/.wrt_autosave.db* chsmack -a 'msg-service::db' /opt/dbspace/.msg_service.db* -chsmack -a 'libslp-calendar::db' /opt/dbspace/.calendar-svc.db* +chsmack -a 'calendar-service::db' /opt/dbspace/.calendar-svc.db* chsmack -a 'email-service::db' /opt/dbspace/.email-service.db* chsmack -a 'push-service::db' /opt/dbspace/.push.db* chsmack -a 'browser::db_external' /opt/dbspace/.browser-history.db* diff --git a/smack_default_rules b/smack_default_rules index 6c9d951..a8c9613 100644 --- a/smack_default_rules +++ b/smack_default_rules @@ -30,7 +30,7 @@ _ aul::db rw _ wrt-commons::db_wrt rw _ wrt-commons::db_wrt_autosave rw _ msg-service::db rw -_ libslp-calendar::db rw +_ calendar-service::db rw _ email-service::db rw _ push-service::db rw _ browser::db_external rw diff --git a/src/privilege-control.c b/src/privilege-control.c index be98182..e406c4e 100644 --- a/src/privilege-control.c +++ b/src/privilege-control.c @@ -39,7 +39,6 @@ #define APP_GID 5000 #define APP_UID 5000 -#define ADMIN_GROUP 6504 #define DEVELOPER_GID 5100 #define DEVELOPER_UID 5100 @@ -167,16 +166,6 @@ static int set_dac(const char* pkg_name) fp_group = NULL; /* - * in case of dialer, add admin to glist - */ - if(!strncmp(pkg_name, "com.samsung.phone", 17) || !strncmp(pkg_name, "org.tizen.phone", 15)) - { - glist = (gid_t*)realloc(glist, sizeof(gid_t) * (glist_cnt + 1)); - glist[glist_cnt] = ADMIN_GROUP; // 6504 - glist_cnt++; - } - - /* * setgroups() */ if(setgroups(glist_cnt, glist) != 0)