From: Susnata Sovalin <s.sovalin@samsung.com>
Date: Fri, 20 Apr 2018 09:49:56 +0000 (+0530)
Subject: Dbus/Cynara Policy Fix
X-Git-Tag: submit/tizen/20180509.103500^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=e6fa3325afdc85f577957782a10c74f30622403e;p=platform%2Fcore%2Flocation%2Flbs-server.git

Dbus/Cynara Policy Fix

Change-Id: I72284113d9feb13f7b0dce2adb5c6edd0ad24a5d
Signed-off-by: Susnata Sovalin <s.sovalin@samsung.com>
---

diff --git a/lbs-server/config/lbs-server.conf b/lbs-server/config/lbs-server.conf
index 463d13d..723de62 100644
--- a/lbs-server/config/lbs-server.conf
+++ b/lbs-server/config/lbs-server.conf
@@ -5,45 +5,31 @@
 	<!-- root can own the service -->
 	<policy user="root">
 		<allow own="org.tizen.lbs.Providers.LbsServer"/>
-		<!-- Allow all methods on interfaces -->
 		<allow send_destination="org.tizen.lbs.Providers.LbsServer"/>
-		<allow receive_sender="org.tizen.lbs.Providers.LbsServer"/>
 	</policy>
 
 	<policy user="system">
 		<allow own="org.tizen.lbs.Providers.LbsServer"/>
 		<allow send_destination="org.tizen.lbs.Providers.LbsServer"/>
-		<allow receive_sender="org.tizen.lbs.Providers.LbsServer"/>
 	</policy>
 
-	<policy context="default">
+	<policy group="location">
 		<allow own="org.tizen.lbs.Providers.LbsServer"/>
+		<allow send_destination="org.tizen.lbs.Providers.LbsServer"/>
+	</policy>
+
+	<policy group="users">
+		<allow own="org.tizen.lbs.Providers.LbsServer"/>
+		<allow send_destination="org.tizen.lbs.Providers.LbsServer"/>
+	</policy>
+
+	<policy context="default">
+		<deny own="org.tizen.lbs.Providers.LbsServer"/>
 		<deny send_destination="org.tizen.lbs.Providers.LbsServer"/>
-		<allow send_type="signal" send_destination="org.tizen.lbs.Providers.LbsServer"/>
-		<allow receive_sender="org.tizen.lbs.Providers.LbsServer"/>
 
 		<check send_destination="org.tizen.lbs.Providers.LbsServer"
-				send_interface="org.tizen.lbs.Manager" privilege="http://tizen.org/privilege/location" />
-		<check send_destination="org.tizen.lbs.Providers.LbsServer"
-				send_interface="org.tizen.lbs.Position" privilege="http://tizen.org/privilege/location" />
-		<check send_destination="org.tizen.lbs.Providers.LbsServer"
-				send_interface="org.tizen.lbs.Nmea" privilege="http://tizen.org/privilege/location" />
-		<check send_destination="org.tizen.lbs.Providers.LbsServer"
-				send_interface="org.tizen.lbs.Satellite" privilege="http://tizen.org/privilege/location" />
-		<check send_destination="org.tizen.lbs.Providers.LbsServer"
-				send_interface="org.tizen.lbs.Batch" privilege="http://tizen.org/privilege/location" />
-
-		<check receive_sender="org.tizen.lbs.Providers.LbsServer"
-				receive_interface="org.tizen.lbs.Manager" privilege="http://tizen.org/privilege/location" />
-		<check receive_sender="org.tizen.lbs.Providers.LbsServer"
-				receive_interface="org.tizen.lbs.Position" privilege="http://tizen.org/privilege/location" />
-		<check receive_sender="org.tizen.lbs.Providers.LbsServer"
-				receive_interface="org.tizen.lbs.Position" privilege="http://tizen.org/privilege/location" />
-		<check receive_sender="org.tizen.lbs.Providers.LbsServer"
-				receive_interface="org.tizen.lbs.Nmea" privilege="http://tizen.org/privilege/location" />
-		<check receive_sender="org.tizen.lbs.Providers.LbsServer"
-				receive_interface="org.tizen.lbs.Satellite" privilege="http://tizen.org/privilege/location" />
-		<check receive_sender="org.tizen.lbs.Providers.LbsServer"
-				receive_interface="org.tizen.lbs.Batch" privilege="http://tizen.org/privilege/location" />
+			privilege="http://tizen.org/privilege/location"/>
+		<check receive_sender="org.tizen.lbs.Providers.LbsServer" receive_type="signal"
+			privilege="http://tizen.org/privilege/location"/>
 	</policy>
 </busconfig>