From 69b43dd909c5ea896bbf5783cbe7384656b9ba4d Mon Sep 17 00:00:00 2001
From: "gloryj.kim" <gloryj.kim@samsung.com>
Date: Thu, 2 Jul 2015 14:11:30 +0900
Subject: [PATCH] Modify SMACK manifest, service, socket requested by Security
 Lab.

Change-Id: I966f8ef4b994e11877e12b10bfbd02c8efd46b59
---
 download-provider-w.manifest     | 35 +----------------------------------
 download-provider.manifest       | 38 +-------------------------------------
 systemd/download-provider.socket |  2 --
 3 files changed, 2 insertions(+), 73 deletions(-)

diff --git a/download-provider-w.manifest b/download-provider-w.manifest
index b200805..a76fdba 100644
--- a/download-provider-w.manifest
+++ b/download-provider-w.manifest
@@ -1,38 +1,5 @@
 <manifest>
-	<define>
-		<domain name="download-provider" />
-		<provide>
-			<label name="download-provider::db" />
-		</provide>
-		<request>
-			<smack request="download-provider::db" type="rw" />
-			<smack request="system::use_internet" type="w" />
-			<smack request="sys-assert::core" type="rwxat" />
-			<smack request="device::sys_logging" type="w" />
-			<smack request="system::media" type="arwxt" />
-			<smack request="system::ext_media" type="arwxt" />
-			<smack request="connman" type="rw" />
-			<smack request="net-config" type="rw" />
-			<smack request="wifi-direct::info" type="r" />
-			<smack request="connman::get" type="rw" />
-			<smack request="telephony_framework::api_ps_public" type="rw" />
-			<smack request="system::vconf" type="rwxat" />
-		</request>
-		<permit>
-			<smack permit="system::use_internet" type="w" />
-		</permit>
-	</define>
 	<request>
-		<domain name="download-provider" />
+		<domain name="_" />
 	</request>
-	<assign>
-		<filesystem path="/usr/lib/libdownload-provider-interface.so*" label="_" exec_label="none" />
-		<filesystem path="/usr/lib/libdownloadagent2.so*" label="_" exec_label="none" />
-		<filesystem path="/usr/lib/systemd/system/download-provider.service" label="_" exec_label="none" />
-		<filesystem path="/usr/lib/systemd/system/graphical.target.wants/download-provider.service" label="_" exec_label="none" />
-		<filesystem path="/usr/lib/systemd/system/download-provider.socket" label="_" exec_label="none" />
-		<filesystem path="/usr/lib/systemd/system/sockets.target.wants/download-provider.socket" label="_" exec_label="none" />
-		<filesystem path="/opt/etc/dump.d/module.d/dump-download-provider.sh" label="_" exec_label="none" />
-		<filesystem path="/usr/share/download-provider/download-provider.res" label="_" />
-	</assign>
 </manifest>
diff --git a/download-provider.manifest b/download-provider.manifest
index dabcc72..a76fdba 100644
--- a/download-provider.manifest
+++ b/download-provider.manifest
@@ -1,41 +1,5 @@
 <manifest>
-	<define>
-		<domain name="download-provider" />
-		<provide>
-			<label name="download-provider::db" />
-		</provide>
-		<request>
-			<smack request="download-provider::db" type="rw" />
-			<smack request="system::use_internet" type="w" />
-			<smack request="sys-assert::core" type="rwxat" />
-			<smack request="device::sys_logging" type="w" />
-			<smack request="system::ext_storage" type="arwxt" />
-			<smack request="system::ext_media" type="arwxt" />
-			<smack request="system::media" type="rwxat" />
-			<smack request="system::media::root" type="rwxat" />
-			<smack request="connman" type="rw" />
-			<smack request="net-config" type="rw" />
-			<smack request="wifi-direct::info" type="r" />
-			<smack request="connman::get" type="rw" />
-			<smack request="telephony_framework::api_ps_public" type="rw" />
-			<smack request="system::vconf" type="rwxat" />
-		</request>
-		<permit>
-			<smack permit="system::use_internet" type="w" />
-		</permit>
-	</define>
 	<request>
-		<domain name="download-provider" />
+		<domain name="_" />
 	</request>
-	<assign>
-		<filesystem path="/usr/share/download-provider*" label="_" />
-		<filesystem path="/usr/lib/libdownload-provider-interface.so*" label="_" exec_label="none" />
-		<filesystem path="/usr/lib/libdownloadagent2.so*" label="_" exec_label="none" />
-		<filesystem path="/usr/lib/systemd/system/download-provider.service" label="_" exec_label="none" />
-		<filesystem path="/usr/lib/systemd/system/graphical.target.wants/download-provider.service" label="_" exec_label="none" />
-		<filesystem path="/usr/lib/systemd/system/download-provider.socket" label="_" exec_label="none" />
-		<filesystem path="/usr/lib/systemd/system/sockets.target.wants/download-provider.socket" label="_" exec_label="none" />
-		<filesystem path="/opt/etc/dump.d/module.d/dump-download-provider.sh" label="_" exec_label="none" />
- 		<filesystem path="/usr/share/download-provider/download-provider.res" label="_" />
-	</assign>
 </manifest>
diff --git a/systemd/download-provider.socket b/systemd/download-provider.socket
index 3130e34..b6d51fd 100644
--- a/systemd/download-provider.socket
+++ b/systemd/download-provider.socket
@@ -3,8 +3,6 @@ ListenStream=/opt/data/download-provider/download-provider.sock
 SocketMode=0777
 PassCredentials=yes
 Accept=false
-SmackLabelIPIn=download-provider
-SmackLabelIPOut=download-provider
 
 [Install]
 WantedBy=sockets.target
-- 
2.7.4