From: Jihoon Jung <jh8801.jung@samsung.com>
Date: Thu, 2 Jul 2015 05:12:40 +0000 (+0900)
Subject: Apply Tizen 3.0 security policy
X-Git-Tag: accepted/tizen/mobile/20150702.104805^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fheads%2Ftizen_3.0.m1_tv;p=platform%2Fcore%2Fconnectivity%2Fnfc-manager.git

Apply Tizen 3.0 security policy

Signed-off-by: Ji-hoon Jung <jh8801.jung@samsung.com>
Change-Id: I5786827305134a445a79690bdef19917f546849c
---

diff --git a/nfc-manager.manifest b/nfc-manager.manifest
index 24771db..4d85805 100644
--- a/nfc-manager.manifest
+++ b/nfc-manager.manifest
@@ -1,97 +1,6 @@
 <manifest>
-	<define>
-		<domain name="nfc-manager" />
-		<provide>
-			<label name="nfc-manager::admin" />
-			<label name="nfc-manager::card_emul" />
-			<label name="nfc-manager::common" />
-			<label name="nfc-manager::p2p" />
-			<label name="nfc-manager::tag" />
-		</provide>
-		<request>
-			<smack request="bt-service::admin" type="w"/>
-			<smack request="bt-service::gap" type="w"/>
-			<smack request="connman::set" type="rw"/>
-			<smack request="connman::get" type="rw"/>
-			<smack request="device::nfc" type="rw"/>
-			<smack request="deviced::display" type="rw" />
-			<smack request="key-storage::db" type="r"/>
-			<smack request="nfc-manager::tag" type="rw"/>
-			<smack request="nfc-manager::p2p" type="rw"/>
-			<smack request="nfc-manager::admin" type="rw"/>
-			<smack request="nfc-manager::card_emul" type="rw"/>
-			<smack request="nfc-manager::common" type="rw"/>
-			<smack request="secure-storage" type="w"/>
-			<smack request="security-server::api-cookie-check" type="w"/>
-			<smack request="smartcard-service" type="rwx" />
-			<smack request="smartcard-service::priv" type="rwx" />
-			<smack request="sys-assert::core" type="rwxat" />
-			<smack request="system::vconf" type="rwxat" />
-			<smack request="system::vconf_inhouse" type="rw"/>
-			<smack request="system::vconf_network" type="rw"/>
-			<smack request="telephony_framework::api_ps_public" type="rw"/>
-			<smack request="tizen::vconf::nfc" type="rw"/>
-			<smack request="tizen::vconf::nfc::admin" type="rw"/>
-			<smack request="tizen::vconf::platform::rw" type="rw"/>
-			<smack request="tizen::vconf::public::r::platform::rw" type="rw"/>
-			<smack request="tizen::vconf::telephony::admin" type="r"/>
-		</request>
-	</define>
-	<assign>
-		<filesystem path="/opt/usr/share/nfc-manager-daemon" exec_label="nfc-manager" />
-		<filesystem path="/usr/bin/nfc-manager-daemon" exec_label="nfc-manager" />
-		<filesystem path="/etc/init.d/libnfc-manager-0" label="_" exec_label="none" />
-		<!-- <filesystem path="/etc/rc.d/rc3.d/S81libnfc-manager-0" label="_" exec_label="none" /> -->
-		<!-- <filesystem path="/etc/rc.d/rc5.d/S81libnfc-manager-0" label="_" exec_label="none" /> -->
-		<filesystem path="/usr/share/dbus-1/system-services/nfc-manager.service" label="_" />
-		<filesystem path="/usr/lib/systemd/system/nfc-manager.service" label="_" />
-		<filesystem path="/usr/lib/systemd/system/multi-user.target.wants/nfc-manager.service" label="_" />
-		<filesystem path="/opt/usr/share/nfc-manager-daemon/*" label="nfc-manager" />
-		<filesystem path="/opt/usr/data/nfc-manager-daemon/*" label="nfc-manager" />
-		<dbus name="org.tizen.NetNfcService" own="nfc-manager" bus="system">
-			<node name="/org/tizen/NetNfcService/*">
-				<interface name="org.tizen.NetNfcService.Manager">
-					<signal name="Activated">
-						<annotation name="org.tizen.smack" value="nfc-manager::admin" />
-					</signal>
-				</interface>
-				<interface name="org.tizen.NetNfcService.P2p">
-					<signal name="Detached">
-						<annotation name="org.tizen.smack" value="nfc-manager::p2p" />
-					</signal>
-					<signal name="Discovered">
-						<annotation name="org.tizen.smack" value="nfc-manager::p2p" />
-					</signal>
-					<signal name="Received">
-						<annotation name="org.tizen.smack" value="nfc-manager::p2p" />
-					</signal>
-				</interface>
-				<interface name="org.tizen.NetNfcService.Tag">
-					<signal name="TagDiscovered">
-						<annotation name="org.tizen.smack" value="nfc-manager::tag" />
-					</signal>
-					<signal name="TagDetached">
-						<annotation name="org.tizen.smack" value="nfc-manager::tag" />
-					</signal>
-				</interface>
-				<interface name="org.tizen.NetNfcService.Ndef">
-					<signal name="Error">
-						<annotation name="org.tizen.smack" value="nfc-manager::tag" />
-					</signal>
-					<signal name="Incoming">
-						<annotation name="org.tizen.smack" value="nfc-manager::tag" />
-					</signal>
-				</interface>
-				<interface name="org.tizen.NetNfcService.Snep">
-					<signal name="SnepEvent">
-						<annotation name="org.tizen.smack" value="nfc-manager::p2p" />
-					</signal>
-				</interface>
-			</node>
-		</dbus>
-	</assign>
-	<request>
-		<domain name="nfc-manager" />
-	</request>
+        <request>
+                <domain name="_" />
+        </request>
 </manifest>
 
diff --git a/packaging/nfc-manager.service b/packaging/nfc-manager.service
index 72908a5..62f8637 100755
--- a/packaging/nfc-manager.service
+++ b/packaging/nfc-manager.service
@@ -9,7 +9,6 @@ Type=simple
 ExecStart=/usr/bin/nfc-manager-daemon --daemon
 KillSignal=SIGKILL
 MemoryLimit=30M
-SmackProcessLabel=nfc-manager
 
 [Install]
 WantedBy=multi-user.target
diff --git a/packaging/nfc-manager.spec b/packaging/nfc-manager.spec
index e6f44ae..7d3703a 100755
--- a/packaging/nfc-manager.spec
+++ b/packaging/nfc-manager.spec
@@ -119,19 +119,15 @@ install -D -m 0644 LICENSE.Flora  %{buildroot}/%{_datadir}/license/nfc-client-li
 /sbin/ldconfig
 
 mkdir -p -m 700 /opt/usr/data/nfc-manager-daemon
-/usr/bin/chsmack -a nfc-manager /opt/usr/data/nfc-manager-daemon
 chown system:system /opt/usr/data/nfc-manager-daemon
 
 mkdir -p -m 744 /opt/usr/share/nfc_debug
-/usr/bin/chsmack -a nfc-manager /opt/usr/share/nfc_debug
 chown system:system /opt/usr/share/nfc_debug
 
 mkdir -p -m 744 /opt/usr/share/nfc-manager-daemon
-/usr/bin/chsmack -a nfc-manager /opt/usr/share/nfc-manager-daemon
 chown system:system /opt/usr/share/nfc-manager-daemon
 
 mkdir -p -m 744 /opt/usr/share/nfc-manager-daemon/message
-/usr/bin/chsmack -a nfc-manager /opt/usr/share/nfc-manager-daemon/message
 chown system:system /opt/usr/share/nfc-manager-daemon/message
 
 systemctl daemon-reload