From: jooseong lee Date: Thu, 10 Nov 2016 05:16:08 +0000 (+0900) Subject: Add 'l' permission to sharedRO Smack rule X-Git-Tag: accepted/tizen/3.0/common/20161114.143355~1 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fchanges%2F52%2F96752%2F2;p=platform%2Fcore%2Fsecurity%2Fsecurity-manager.git Add 'l' permission to sharedRO Smack rule DB in shared/data cannot be accessed by other applications. File lock permission is also needed. Change-Id: I90f05fabfa2e4a62df8a3e1c40a48c341ecb86f2 Signed-off-by: jooseong lee --- diff --git a/src/common/smack-rules.cpp b/src/common/smack-rules.cpp index 762b422..6cf2bbb 100644 --- a/src/common/smack-rules.cpp +++ b/src/common/smack-rules.cpp @@ -60,7 +60,7 @@ const std::string SMACK_RULES_PATH_MERGED_T = LOCAL_STATE_DIR "/security-mana const std::string SMACK_RULES_PATH = LOCAL_STATE_DIR "/security-manager/rules"; const std::string SMACK_RULES_SHARED_RO_PATH = LOCAL_STATE_DIR "/security-manager/rules/shared_ro"; const std::string SMACK_APP_IN_PACKAGE_PERMS = "rwxat"; -const std::string SMACK_APP_CROSS_PKG_PERMS = "rx"; +const std::string SMACK_APP_CROSS_PKG_PERMS = "rxl"; const std::string SMACK_APP_PATH_OWNER_PERMS = "rwxat"; const std::string SMACK_APP_PATH_TARGET_PERMS = "rxl"; const std::string SMACK_APP_DIR_TARGET_PERMS = "x";