From 1196011c0f8feceb4321dbf973f1a2ee97b3d365 Mon Sep 17 00:00:00 2001
From: "sangwan.kwon" <sangwan.kwon@samsung.com>
Date: Fri, 27 Oct 2017 11:46:39 +0900
Subject: [PATCH] Grant System::Shared label to pakage-directory

[Background]
- App-installer is run as System label and it handles
  package-directory of trust-anchor
- Launchpad is run as User label and it reads package-directory

[Problem]
- Files of package-directory is made by app-installer as System label.
  So, Launchpad cannot read it.

[Solution]
- Grant System::Shared label.

Change-Id: I492ec4c5e4ddd2d530b88581eb2fbfc8d32a4874
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
---
 packaging/trust-anchor.manifest.in | 1 +
 packaging/trust-anchor.spec        | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/packaging/trust-anchor.manifest.in b/packaging/trust-anchor.manifest.in
index b5de845..30520d5 100644
--- a/packaging/trust-anchor.manifest.in
+++ b/packaging/trust-anchor.manifest.in
@@ -4,5 +4,6 @@
 	</request>
 	<assign>
 		<filesystem path="@TANCHOR_BASE@" label="@SMACK_LABEL@" type="transmutable" />
+		<filesystem path="@TANCHOR_PKG@" label="@PKG_SMACK_LABEL@" type="transmutable" />
 	</assign>
 </manifest>
diff --git a/packaging/trust-anchor.spec b/packaging/trust-anchor.spec
index a372962..2e0e8d4 100644
--- a/packaging/trust-anchor.spec
+++ b/packaging/trust-anchor.spec
@@ -20,6 +20,7 @@ Requires(postun): /sbin/ldconfig
 %global user_name        security_fw
 %global group_name       security_fw
 %global smack_label      System
+%global pkg_smack_label  System::Shared
 
 %global tanchor_base     %{TZ_SYS_DATA}/%{lib_name}
 %global tanchor_pkg      %{tanchor_base}/pkg
@@ -61,6 +62,7 @@ SSL root certificates for its HTTPS communication.
 		 -DUSER_NAME=%{user_name} \
 		 -DGROUP_NAME=%{group_name} \
 		 -DSMACK_LABEL=%{smack_label} \
+		 -DPKG_SMACK_LABEL=%{pkg_smack_label} \
 		 -DTANCHOR_BASE=%{tanchor_base} \
 		 -DTANCHOR_PKG=%{tanchor_pkg} \
 		 -DTANCHOR_BUNDLE=%{tanchor_bundle} \
-- 
2.34.1