From: jin-gyu.kim <jin-gyu.kim@samsung.com>
Date: Thu, 24 Aug 2017 13:11:56 +0000 (+0900)
Subject: Apply changing permission of /var/lib/misc to all profiles.
X-Git-Tag: submit/tizen/20170824.132109^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=eafb44eb9dc0d77c89eaed74036d89b7c25820a0;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git

Apply changing permission of /var/lib/misc to all profiles.

- It was only applied on mobile / wearable profiles before.
- This should be worked on other profiles also.

Change-Id: I62584c73eb638d68b82944a7ea0de862c53b6503
---

diff --git a/config/set_capability b/config/set_capability
index 77cb28a..e1c9d8e 100755
--- a/config/set_capability
+++ b/config/set_capability
@@ -564,3 +564,12 @@ done
 
 # Set SMACK label as "System::Privileged" in /opt/var/security-manager/rules
 chsmack -r -a "System::Privileged" /opt/var/security-manager/rules
+
+# change permission to /opt/var/lib/misc
+# This is needed to retrieve CAP_DAC_OVERRIDE from mobileap-agent & dnsmasq.
+if [ -e /opt/var/lib/misc ]
+then
+	chown root:system_share /opt/var/lib/misc
+	chmod 0775 /opt/var/lib/misc
+fi
+
diff --git a/smack/smack_default_labeling b/smack/smack_default_labeling
index 20b40fa..42abf4a 100644
--- a/smack/smack_default_labeling
+++ b/smack/smack_default_labeling
@@ -30,11 +30,6 @@ function set_smack_label
 	# onlycap feautre
 	chsmack -e "User" /usr/bin/launchpad-loader
 	chsmack -e "User" /usr/bin/wrt-loader
-
-	# change permission to /opt/var/lib/misc
-	# This is needed to retrieve CAP_DAC_OVERRIDE from mobileap-agent & dnsmasq.
-	chown root:system_share /opt/var/lib/misc
-	chmod 0775 /opt/var/lib/misc
 }
 
 check_init_boot