From: Jeesun Kim <iamjs.kim@samsung.com>
Date: Tue, 10 Apr 2018 09:16:11 +0000 (+0900)
Subject: dbus-policy: add rule default deny own
X-Git-Tag: accepted/tizen/unified/20180412.073842~1
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fchanges%2F52%2F175452%2F3;p=platform%2Fcore%2Fpim%2Fcalendar-service.git

dbus-policy: add rule default deny own

Change-Id: Ib48376012efbbc9eac9f97b92f3ccaee5de89e8f
---

diff --git a/packaging/calendar-service.conf.in b/packaging/calendar-service.conf.in
index ab1e9b7..d49dcd1 100644
--- a/packaging/calendar-service.conf.in
+++ b/packaging/calendar-service.conf.in
@@ -2,18 +2,15 @@
 <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
 <busconfig>
-    <policy user="root">
-        <allow own="@DBUS_INTERFACE@"/>
-		<allow send_destination="@DBUS_INTERFACE@" send_interface="@DBUS_INTERFACE@"/>
-		<allow receive_sender="@DBUS_INTERFACE@"/>
-    </policy>
-    <policy user="system">
-        <allow own="@DBUS_INTERFACE@"/>
-		<allow send_destination="@DBUS_INTERFACE@" send_interface="@DBUS_INTERFACE@"/>
-		<allow receive_sender="@DBUS_INTERFACE@"/>
-    </policy>
     <policy context="default">
-        <allow send_destination="@DBUS_INTERFACE@"/>
+		<deny send_destination="@DBUS_INTERFACE@"/>
+		<allow send_destination="@DBUS_INTERFACE@" send_type="signal"/>
+		<check send_destination="@DBUS_INTERFACE@"
+				send_interface="@DBUS_INTERFACE@" send_member="register_resource"
+				/>
+		<check send_destination="@DBUS_INTERFACE@"
+				send_interface="@DBUS_INTERFACE@" send_member="unregister_resource"
+				/>
 		<check send_destination="@DBUS_INTERFACE@"
 				send_interface="@DBUS_INTERFACE@" send_member="check_permission_write"
 				privilege="http://tizen.org/privilege/calendar.write"/>