From 81e8ba9f3ab0917da4fdfa094f49333be57964c6 Mon Sep 17 00:00:00 2001
From: Seungbae Shin <seungbae.shin@samsung.com>
Date: Fri, 4 May 2018 16:43:07 +0900
Subject: [PATCH] Apply deny policy for default context in dbus conf

[Version] 11.1-33
[Issue Type] Security

Change-Id: I8e3c1724d786270a06de92ee8c8260bd12abff85
---
 packaging/pulseaudio.spec         | 2 +-
 src/daemon/pulseaudio-system.conf | 8 ++++++--
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/packaging/pulseaudio.spec b/packaging/pulseaudio.spec
index 64b867b..38a7b9f 100644
--- a/packaging/pulseaudio.spec
+++ b/packaging/pulseaudio.spec
@@ -3,7 +3,7 @@
 Name:             pulseaudio
 Summary:          Improved Linux sound server
 Version:          11.1
-Release:          32
+Release:          33
 Group:            Multimedia/Audio
 License:          LGPL-2.1
 URL:              http://pulseaudio.org
diff --git a/src/daemon/pulseaudio-system.conf b/src/daemon/pulseaudio-system.conf
index 2f21db9..2a2a521 100644
--- a/src/daemon/pulseaudio-system.conf
+++ b/src/daemon/pulseaudio-system.conf
@@ -37,7 +37,11 @@ License along with PulseAudio; if not, see <http://www.gnu.org/licenses/>.
   </policy>
 
   <policy context="default">
-    <allow send_destination="org.pulseaudio.Server"/>
-    <check send_destination="org.pulseaudio.Server" send_interface="org.pulseaudio.StreamManager" send_member="SetVolumeLevel" privilege="http://tizen.org/privilege/volume.set" />
+    <deny own="org.pulseaudio.Server"/>
+    <deny send_destination="org.pulseaudio.Server"/>
+    <allow send_destination="org.pulseaudio.Server" send_interface="org.pulseaudio.StreamManager"/>
+    <check send_destination="org.pulseaudio.Server" send_interface="org.pulseaudio.StreamManager" send_member="SetVolumeLevel" privilege="http://tizen.org/privilege/volume.set"/>
+    <allow send_destination="org.pulseaudio.Server" send_interface="org.pulseaudio.DeviceManager"/>
+    <allow send_destination="org.pulseaudio.Server" send_interface="org.pulseaudio.SoundPlayer"/>
   </policy>
 </busconfig>
-- 
2.7.4