From 2cbd709d3e9a6d3c68066a2766da9eb7b8713f8a Mon Sep 17 00:00:00 2001
From: Corentin Lecouvey <corentin.lecouvey@eurogiciel.fr>
Date: Wed, 20 Nov 2013 15:04:43 +0100
Subject: [PATCH] add dbus policy conf file

This patch permits root user to own 'org.download-provider' bus name.
In addition it adds a "send_destination" rule to allow traffic to this service.

Bug-Tizen: TIVI-2045 and TIVI-1629

Change-Id: I625f9dfd9626edbafb0832aa39c6879186d7ba4c
Signed-off-by: Corentin Lecouvey <corentin.lecouvey@eurogiciel.fr>
---
 packaging/download-provider.spec     |  8 ++++++++
 packaging/org.download-provider.conf | 11 +++++++++++
 2 files changed, 19 insertions(+)
 create mode 100644 packaging/org.download-provider.conf

diff --git a/packaging/download-provider.spec b/packaging/download-provider.spec
index 627e70d..a07bf89 100755
--- a/packaging/download-provider.spec
+++ b/packaging/download-provider.spec
@@ -7,6 +7,7 @@ Group:      Development/Libraries
 License:    Apache License, Version 2.0
 Source0:    %{name}-%{version}.tar.gz
 Source1:    download-provider.service
+Source101:  org.download-provider.conf
 Source1001: 	download-provider.manifest
 Requires(post): /usr/bin/sqlite3
 BuildRequires:  cmake
@@ -41,12 +42,14 @@ Description: download the contents in background (developement files)
 
 %prep
 %setup -q
+cp %{SOURCE101} .
 cp %{SOURCE1001} .
 
 %define _imagedir /usr/share/download-provider
 %define _databasedir /opt/usr/dbspace
 %define _databasefile %{_databasedir}/.download-provider.db
 %define _dbusservicedir /usr/share/dbus-1/system-services
+%define _dbuspolicydir /etc/dbus-1/system.d
 %define _licensedir /usr/share/license
 
 %define cmake \
@@ -82,6 +85,10 @@ make %{?jobs:-j%jobs}
 %install
 rm -rf %{buildroot}
 %make_install
+
+install -d -m 755 %{buildroot}%{_dbuspolicydir}
+install -m 644 %{SOURCE101} %{buildroot}%{_dbuspolicydir}
+
 mkdir -p %{buildroot}%{_licensedir}
 mkdir -p  %{buildroot}%{_sysconfdir}/rc.d/rc3.d
 ln -s %{_sysconfdir}/rc.d/init.d/download-provider-service  %{buildroot}%{_sysconfdir}/rc.d/rc3.d/S70download-provider-service
@@ -181,6 +188,7 @@ fi
 %{_sysconfdir}/rc.d/rc5.d/S70download-provider-service
 %{_licensedir}/%{name}
 %{_dbusservicedir}/org.download-provider.service
+%{_dbuspolicydir}/org.download-provider.conf
 %attr(660,root,app) /opt/usr/dbspace/.download-provider.db
 %attr(660,root,app) /opt/usr/dbspace/.download-provider.db-journal
 
diff --git a/packaging/org.download-provider.conf b/packaging/org.download-provider.conf
new file mode 100644
index 0000000..945c394
--- /dev/null
+++ b/packaging/org.download-provider.conf
@@ -0,0 +1,11 @@
+<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+    <policy user="root">
+        <allow own="org.download-provider"/>
+    </policy>
+    <policy context="default">
+        <allow send_destination="org.download-provider"/>
+    </policy>
+</busconfig>
+
-- 
2.7.4