Change logs in SS to correct error logs.

[Issue#]        SSDWSSP-234
[Bug/Feature]   Security-server SMACK dlog should be "ERROR", not info
[Cause]         N/A
[Solution]      Log type changed to error
[Verification]  Compile and run. SS should generate both: debug and
                error logs on dlog

Change-Id: I8e4c609d30cc71ab4395e85ab5bf9c6a7e97abf9

Add binary path to SMACK log

[Issue#]        SSDWSSP-203
[Bug/Feature]   Change logs in security_server_check_privilege_by_sockfd
[Cause]         N/A
[Solution]      N/A
[Verification]  Compile. Run tests.

Change-Id: I6ca2cfc97bc795eefa287c82b0a826f2d6c853a9

Merge missing code pieces from private repository.

[Issue#]       N/A
[Bug]          Patches applied in different version in RSA and private repository
[Cause]        Developers not careful enough about applying patches in both places
[Solution]     Move missing bits of code
[Verification] Build

Change-Id: If1f65e07b44e1a2ad40f9d67f0ae211511948632

remove set_pmon

Change-Id: I7ac0c26573e52e8ed70e96a32de5962168548811

Add #ifdef SMACK_ENABLED to private code.

With this define commented, all security-server API
should work as if there was no SMACK error and SMACK
allowed for everything.

[Issue#]   SSDWSSP-206 & SSDWSSP-221
[Bug]      N/A
[Cause]    SS should work without SMACK enabled.
[Solution] As mentioned above.

[Verification] Build with and without ADD_DEFINITIONS( -DSMACK_ENABLED ).
1. SMACK enabled system.
1.1 -DSMACK_ENABLED on: SS tests should not fail
1.2 -DSMACK_ENABLED off: Following SS tests should fail:
 -client-smack:
  -tc04_security_server_get_gid_client_is_not_allowed
  -tc05_check_privilege_by_cookie
  -tc06_check_privilege_by_sockfd
  -tc07_check_privilege_by_sockfd
 -label:
  -tc_security_server_get_smacklabel_cookie
 -server:
  -tc01a_security_server_app_give_access
  -tc02_check_privilege_by_pid
 There should be no missing SMACK rules for security server sockets in dmesg

2. SMACK disabled system. Same results for -DSMACK_ENABLED on and off. Beside tests
failing in 1.2 all test cases using smack_accesses_apply and smack_have_access will also fail.

Change-Id: Ia1074d9da4a07e3a60878030b9b8fc3760340c73

Removing authentication of middleware

Change-Id: I276c83539a09db05500539dfa600bb05a64ceae0

Fixing klocwork bugs

[Issue#] N/A
[Bug] Bugs found by klocwork
[Cause] N/A
[Solution] N/A
[Verficiation] Build and run all tests

Change-Id: I386f3e74820c518fd0437f082246c7fa1177ced4

Implemet data control solution for OSP apps.

Function security_server_app_give_access may be called only by
priviledge process (process must have "rw" access to
"security-server::api-data-share"). In current implemnetation security
check is made in user space. It should be moved to kernel space by
creating separate socket with "security-server::api-data-share" label.

[Issue#]   SSDWSSP-177
[Bug]      N/A
[Cause]    OPS application need to share memory.
[Solution] Add cross rules between OSP application.

[Verification] Build.

Change-Id: Ie6bad6e924bbcd1b37af58cb7650f65bebd5d57c

Fix process_pid_privilege_check function.

Prevent function process_pid_privilege_check from closing random socket
when something fails.

[Issue#]   N/A
[Bug]      N/A
[Cause]    Value was not initialized.
[Solution] N/A

[Verification] Build.

Change-Id: Id77c84c9f2ac1237c56f7cd5ff00258d40680459

Change logs in security server connected to SMACK

[Issue#]        SSDWSSP-203
[Feature]       New logs format
[Cause]         Deprecated log format
[Solution]      Log format changed
[Verification]  Compile, no tests should fail

Change-Id: I38d227b99e341cc76f540a7dc56c4532704ce9e3

Add debug log for smack_have_acces in security-server

[Issue#]        SSDWSSP-185
[Feature]       New security-server API
[Problem]       N/A
[Cause]         N/A
[Solution]      New log message added

[Verification]  Build package

Change-Id: I69df34df93a3efec58073667c9ac1a0d4cba031c

Implemet data control solution for OSP apps.

[Issue#]   SSDWSSP-177
[Bug]      N/A
[Cause]    OPS application need to share memory.
[Solution] Add cross rules between OSP application.

[Verification] Build.

Change-Id: I5085e5f0130ff687aaa142006837110077ba00be

Cookie executable path logic fixed and refactored.

[Issue#] SSDWSSP-237 / P130508-4841
[Bug] Security-server has closed unexpectedly
[Problem] N/A
[Cause] Executable paths were improperly compared and triggered pid reusage code
branch.
[Solution] Executable paths logic fixed and refactored.

[Verification] Run all security-server tests

Change-Id: I68219631378be17c980b52fa8995d9bc37d69ed7

Conflicts:

src/server/security-server-cookie.c

Fixed compilation error

[Issue#] SSDWSSP-229
[Feature/Bug] Compilation error
[Problem] N/A
[Cause] Error logs are not yet available
[Solution] Changed to debug logs

[Verification] Successfull compilation

Change-Id: I29a8268cfefc41189e4c1e218387a20a48cf9142

Reimplementing process_app_get_access_request

[Issue#] SSDWSSP-229
[Feature] No revoking for label given by this function
[Cause] N/A
[Solution] Rewriting function inside security-server code,
not using libprivilege-control
[Verification] Build and run tests (testcases for revoking label
may fail)

Change-Id: Ie1d682f1dc76c108da7c602c958d8db9d33519ad

Fix for TIVI 2222 : Add build option to enable SMACK related features

Change-Id: I2069e76a88892ada0ce401451600566028014ca8
Signed-off-by: Baptiste DURAND <baptiste.durand@eurogiciel.fr>

Change variable type for system observer thread

The event_callback is not correctly transmitted to the system
observer thread. Change so_config into static variable

Change-Id: I7572eedcbcbaa33027841c0b7fbf588c34a5d35b
Bug-Tizen: IVI-1793

Cleanup spec and remove defunct system V startup scripts

Fix several rpmlint errors and removed the pointless startup script
from the source and all the logic for installing it in the spec

smack API has changed; smack_new_label_from socket returns the label
length.

Fix the manifest installation

Change-Id: I32c2c22ebfb91e1ae497a807791c2703f1667c1d

Fix the manifest installation

Change-Id: I32c2c22ebfb91e1ae497a807791c2703f1667c1d

Merge "resetting manifest requested domain to floor" into tizen

resetting manifest requested domain to floor

resetting manifest requested domain to floor

merge back from tizen_2.1_smack

[Release] security-server_0.0.73

* Removed authentication of middleware

Change-Id: I430da7b68dc2f2645082e6e82b1e35a9f8e23bbc

[Release] security-server_0.0.72

* fixed release commit message

Change-Id: I7c56fe03e85c5b906b0aac055ab352d18f3d2b2d

[Release] security-server-0.0.72

* prevent bugfixes
* unnecessary package dependecies removed

Change-Id: I0820cc1656b6405db68aead4cfed609ad7c86175

Fix bugs reported by prevent.

[Issue#]   N/A
[Bug]      Sizeof gets wrong argument.
[Cause]    N/A
[Solution] Sizeof gets type of struct now.

[Verification] Build. Run security tests.

Change-Id: I300591ae3fa1040d9f316699551b522bf222acce

Remove package from build dependency that are not requried druing build.

[Issue#]   N/A
[Bug]      N/A
[Caluse]   N/A
[Solution] N/A

[Verification] Build.

Change-Id: Ib13ed0a3c837b85c410633a047212042447ebe27

Merge remote-tracking branch 'rsa/tizen_2.1' into rsa_master

Change-Id: I15d1549c23d65fa677c10065dd5880647c4a3060

[Release] security-server_0.0.71

* Remove usage of mw-list file in security-server

Change-Id: I6c47b7f6cbe5040147be837112a50a079893d1bd

Remove usage of mw-list file in security-server

[Issue#]SSDWSSP-186
[Feature/Bug] N/A
[Problem] N/A
[Cause] N/A
[Solution] Removing hardcoded set of trusted daemon binaries.
Removing function search_middleware_exe_path and file with mw-list entries.
[Verification] Build, tests

Change-Id: I3f7bd1d37bc0b315642884801c80d3e308f78a2a

Middleware list check fixed.

[Issue#] N/A
[Feature/Bug] N/A
[Problem] Empty line in mw-lists matches everything.
[Cause] N/A
[Solution] Commandline replaced by executable name. Fixed comparison of
executable name with mw-list entries. Empty line removed from mw-list. 50 chars
limit removed

[Verification] Run all security server tests

Change-Id: I872ad45a4089b484a30fc4caa1759ce9d6a584e4

Fix for 64 bit compatibility.

- Fix hardcoding path.
- Use %cmake to set default paths.

Change-Id: I102e9d18662ec001eafc48c9826405bf427f6910

Fix for 64 bit compatibility.

- Fix hardcoding path.
- Use %cmake to set default paths.

Change-Id: I102e9d18662ec001eafc48c9826405bf427f6910

Merge remote-tracking branch 'rsa/tizen_2.1' into rsa_master

[Release] security-server_0.0.70

* Prevent bugfixes from private repo

Change-Id: I52ea4353e5f4092672135323b30f5ae8e295f1d1

Read or write may be interrupt.

This commits add suport for interruption of read or write. Please note
that we still need to add support for sitation when read or write
returns less that we expect.

[Issue#]    N/A
[Bug]       N/A
[Cause]     N/A
[Solution]  N/A

[Verification] Run all security-server tests.

Change-Id: I799fd41245cce004582458f98f49511a2860ff0e

Reemove compilation warrnings.

[Issue#]    N/A
[Bug]       N/A
[Cause]     N/A
[Solution]  N/A

[Verification] Run all security-server tests.

Change-Id: Icedbece62623b2393eb16c3776a909db8443c073

Fix defects reported by prevent.

[Issue#]        SSDWSSP-115
[Bug]           N/A
[Cause]         N/A
[Soultion]      N/A

[Verification]  Run all security-server tests.

Change-Id: I61a437f604e94b6897d1b2b76aca8217893a307e

[Release] security-server_0.0.69

* Table allocation bug fixed
* Password timeout changed
* Merged master into tizen_2.1

Change-Id: I85d41e0f8c1e10491a1fab07586058c1ef5f7271

[Release] security-server_0.0.69

* Table allocation bug fixed
* Password timeout changed

Change-Id: I70b81639a80600fa83cf93ae08ebced1fa83fe84

Change password timeout from 1 seconds to 500000 microseconds.

[Issue#]    N/A
[Bug]       N/A
[Cause]     N/A
[Solution]  N/A

[Verification] Run all security-server tests.

merge with master

Tizen 2.1 base

Fix bug in table allocation.

[Issue#]        N/A
[Bug]           Wrong pointer passed to allocating fuinction
[Cause]         N/A
[Soultion]      Changed to correct pointer
[Verification]  No warnings while compilation

Change-Id: I54d00e11862f1986b0518009bdb30a5942f127b7

[Release] security-server_0.0.67

* Fix bug with searching cookie with no privileges.

Change-Id: I46ab72148143df3f1a76956aa8f4474147ef3338

Fix bug with searching cookie with no privileges.

[Issue#]        SSDWSSP-102
[Bug]           Bug with get_smack_label in security-server
[Cause]         Error in searching cookie with no privileges set
[Soulution]     Special trading cookies with no privileges set
[Verification]  Code compiles with success

Change-Id: I25debbc88315f316ed08b1cda2895bd3d9d90116

[Release] security-server_0.0.65

* Proper %post and %postun scripts in spec file
* Removing unused code and separating deprecated files
* Fix for several issues detected by Prevent

Change-Id: I494fba79e6c11e9c298a4972a99a4847e9caffe6

Merge "Proper %post and %postun scripts in spec file"

Removing unused code and separating deprecated files

[Issue#] SSDWSSP-98
[Feature] N/A
[Cause] Removal of unwanted files from security-server
[Solution] N/A
[Verification] Successful build

Change-Id: I27fbd9ca4d597c71b65400c4ed71458b406f557b

Fix for several issues detected by Prevent

[Issue#] SSDWSSP-106
[Problem] Issues detected by Prevent
[Cause] N/A
[Solution] N/A
[Verification] Build and run tests

Change-Id: Ie0d469e73685fd518da2a374cf0c0e5dea5829eb

Proper %post and %postun scripts in spec file

[Issue#]   N/A
[Bug]      errors when upgrading rpm package via rpm -U command
[Cause]    bugged %post and %postun scripts in spec file
[Solution] fixed %post and %postun scripts to handle upgrades properly

[Verification] Build and install rpm files, then increment version
               number in spec file and build and install with rpm -U.
               No security-server related errors should appear after
               second installation, S10security-server symlinks in
               /etc/rc.d/rc3.d/ and /etc/rc.d/rc5.d/ should exist.
               After package uninstallation symlinks should be gone.

Change-Id: I5f0ec6e640f14c12335de0338d3e75d883d1a79e

Fix for several issues detected by Prevent

[Issue#] SSDWSSP-107
[Problem] Issues detected by Prevent
[Cause] N/A
[Solution] Please see comments below
[Verification] Build and run

Changes:
* Added a sanity check for new_pwd_len in (prevent #42100)
* Added a check for result of setuid in security server test case
  (prevent #42102)
* Fixed a bug in one of the test cases (comparing smack labels)
  (prevent #43435)
* Fixed a bug where one error condition was not handled properly, which in turn
  led to double free.

Change-Id: I54562981cf5e1201f8f62852da5cb6b3473df138

[Release] security-server_0.0.64

* Fixed bug with searching cookie for root process in security-server

Change-Id: Ic499ef20918e791351d1a3acdf30697532481618

Fixing bug with searching cookie and privileges in security-server.

[Issue#]        SSDWSSP-71
[Cause]         Fix bug with access to security-server API
                by some root processes.
[Problem]       Access to security server API returns error
                for alarm service.
[Solution]      Removed special treating root processes when searching
                cookies for caller.
[Verification]  Security-serwer should return no error while
                calling security_server_check_privilege()
                with correct parameters. Setting clock alarm should
                return no errors in DLOGUTIL.

Change-Id: I86a950afedd326c021ab00d7ba6a868034d647f9

[Release] security-server_0.0.63

* Add new functions to security-server API

Change-Id: I05ca7e3356db323123a026b02875a7a30d6e3f32

Add new functions to security-server API.

[Issue#]        SSDWSSP-45
[Cause]         Implement new APIs for getting SMACK label
                of peer in security-server
[Problem]       Two new function needed in API. Both returns
                SMACK labels but ttaking another parameters.
                First uses cookie, second socked descriptor.
[Solution]      New functions added
[Verification]  Tests should not fail

Change-Id: I4ca044230f1cba1174b61abae6b7641e1bbfcdbc

Cherry-pick release: security-server_0.0.62

* Separated security-server and wrt-security-daemon
* This repository holds security-server now

Conflicts:

CMakeLists.txt
packaging/security-server.spec
socket_connection/connection/SocketStream.cpp
tests/CMakeLists.txt
tests/security_server_tests/CMakeLists.txt

Change-Id: I1185bb69f8517da9f5fa5299335e8cc856ba402f

Fixing communication problem with security-server

[Issue#] LINUXSWAP-454
[Bug] Security-server crashes
[Cause] No handling of SIGPIPE signal when writing to closed socket
[Solution] blocking SIGPIPE signal in all threads created by socket
service and handling error returned by write
[Verification] Build, run tests and check  JIRA bug(N_SE-20154)

Change-Id: Id6d15922bb9b94cb9ee565e9e90ed0e46a27e25c

Prevent related bugfixes.

[Issue] N/A
[Bug] Bugs found by Coverity.
[Cause] N/A
[Solution] Checking varibale values, catching exception.
[Verification] Build security-server, run all tests.

Change-Id: Ide143746a4a4ccc4cc575f14cfb3529d3b32d088

Add NOTICE file

Change-Id: Icb39ceba4aaefb880d949f213cdf25bb47a34e5c

[Prevent] Multiple minor bugfixes.

[Issue] Bugs found by Coverity.
[Bug] N/A
[Cause] N/A
[Solution] Fixed bugs.
[Verification] Build security-server.

Change-Id: I33df2ee3d0c8a6a1abbe6ff89063603c604bb2aa

Re-enabling systemd configuration.

Change-Id: I7eb6c073b1614482331dff6d885c63848c47c7f9

Merge "Invoke initiate_try to init variable"

Release of changes from Samsung private repository.

* Fixed Prevent defects

Change-Id: I3468cf2754656c7f0b4a3cc619fcfdd1c758d2e6

Invoke initiate_try to init variable

Change-Id: I382d1ad805dec133051f098ceb62a42559e0ab38
Signed-off-by: Chengwei Yang <chengwei.yang@intel.com>

Release of changes from Samsung private repository.

* Fixed possible thread synchronization issue

Change-Id: I434ff4bf5c539dfe845d52369dc51d7bddc29081

Release of changes from Samsung private repository.

* Enabled sockets in security server
* Removed old popup implementation

Change-Id: Iceb91878e48bd0cad819aa07e3de147a7befd1c8

Release of changes from Samsung private repository.

* Adjusted TizenPolicy.xml - added missing "deny" clause for Untrusted widgets

Change-Id: Ic0bc673b1ed856bbd008dcc3e64202d6456fe529

Release of changes from Samsung private repository.

* Adjusted TizenPolicy.xml according to Device API HQ team request

Change-Id: I399896954b5462119e365220b9f39a23956f6ae2

[systemd] systemd boot script for security-server
          in addtion, add to verify middleware user.

Release of changes from Samsung private repository.

* Fixed problem with leaving zombie after SIGTERM
* Turned on logs in "old security server".
* Added new TizenPolicy as per HQ WRT team request

Change-Id: I170af48d89407ff9dc770563bb3ab4aa47cabc6d

Release changes from Samsung private repository.

* Prepared headers for abstract communication client
* Added implementation of security socket server
* Added ace_is_private_api function in ace_settings
* Fixed klocwork bugs
* Added Partner API section in Tizen Policy
* Added build type required for code coverage analysis
* Removed deprecated headers from dev package

Change-Id: I57bf5912e45c6b6f5c514f45e52b60490404d244

release 0.0.48

Change-Id: I8cb402cb786e55e5b6894c0b8fc4e5a0112900ac

Merge branch 'for-rsa-systemd'

Change-Id: If23f809e103988990930032eafadf9c7b8ccb958

include types.h header file

Separation of wrt.db and ace.db #1
Prepare AceDB to handle all necessary information.

[Issue#] LINUXSWAP-211
[Problem] Separation ACE and WrtDB
[Cause] N/A
[Solution] AceDB extended
[Verification] To verify successfuly build repository

Change-Id: I5b55ae522dcdd944022a4ff1e23155b593b77632

fix manifest

Release changes from Samsung private repository.

* merge of security-server and wrt-security-daemon
* added wrt-ocsp API
* added support for Orange certficates

Change-Id: I0d498b7070876c77d45ce18226f35c08f67c13bb

source code open - security-server

upload tizen1.0 source

Initial empty repository