From 9ca19201fb002a58ab85c3d182f1fc1c123a460d Mon Sep 17 00:00:00 2001
From: "jy910.yun" <jy910.yun@samsung.com>
Date: Fri, 10 May 2013 17:54:54 +0900
Subject: [PATCH] apply smack rule and change the smack label of system-server
 to deviced

Signed-off-by: jy910.yun <jy910.yun@samsung.com>
---
 CMakeLists.txt                   | 3 ++-
 packaging/system-server.manifest | 4 ++--
 packaging/system-server.rule     | 5 +++++
 packaging/system-server.spec     | 1 +
 4 files changed, 10 insertions(+), 3 deletions(-)
 create mode 100644 packaging/system-server.rule

diff --git a/CMakeLists.txt b/CMakeLists.txt
index 78aed6d..19e5684 100755
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -58,7 +58,7 @@ MESSAGE("FLAGS: ${CMAKE_C_FLAGS}")
 
 ADD_DEFINITIONS("-DPREFIX=\"${CMAKE_INSTALL_PREFIX}\"")
 ADD_DEFINITIONS("-DFACTORYFS=\"$ENV{FACTORYFS}\"")
-IF( $ENV{ARCH} MATCHES "arm" ) 
+IF( $ENV{ARCH} MATCHES "arm" )
 	ADD_DEFINITIONS("-DTARGET")
 ENDIF()
 ADD_DEFINITIONS("-DDEBUG -DENABLE_DLOG_OUT")
@@ -76,6 +76,7 @@ INSTALL(FILES ${MOVINAND_FORMAT} DESTINATION bin)
 INSTALL(FILES ${UDEV_RULES} DESTINATION ${UDEV_RULES_PATH})
 INSTALL(PROGRAMS ${CMAKE_BINARY_DIR}/system_server.sh DESTINATION /etc/rc.d/init.d)
 INSTALL(FILES system-server.conf DESTINATION /etc/dbus-1/system.d)
+INSTALL(FILES ${CMAKE_SOURCE_DIR}/packaging/system-server.rule DESTINATION /opt/etc/smack/accesses.d)
 
 ADD_SUBDIRECTORY(restarter)
 ADD_SUBDIRECTORY(sys_event)
diff --git a/packaging/system-server.manifest b/packaging/system-server.manifest
index fa0d09e..832a313 100644
--- a/packaging/system-server.manifest
+++ b/packaging/system-server.manifest
@@ -1,6 +1,6 @@
 <manifest>
 	<define>
-		<domain name="system-server"/>
+		<domain name="deviced"/>
 	</define>
 	<assign>
 		<filesystem path="/etc/init.d/system_server.sh" label="_" exec_label="none" />
@@ -11,6 +11,6 @@
 		<filesystem path="/usr/lib/systemd/system/multi-user.target.wants/system-server.service" label="_" exec_label="none" />
 	</assign>
 	<request>
-		<domain name="system-server"/>
+		<domain name="deviced"/>
 	</request>
 </manifest>
diff --git a/packaging/system-server.rule b/packaging/system-server.rule
new file mode 100644
index 0000000..3442a87
--- /dev/null
+++ b/packaging/system-server.rule
@@ -0,0 +1,5 @@
+deviced sys-assert::core rwxat
+deviced system::vconf rwxat
+deviced telephony_framework::api_manager r
+deviced telephony_framework::api_modem wx
+pulseaudio deviced rw
diff --git a/packaging/system-server.spec b/packaging/system-server.spec
index 3bc3df7..98ffba5 100755
--- a/packaging/system-server.spec
+++ b/packaging/system-server.spec
@@ -132,6 +132,7 @@ systemctl daemon-reload
 %{_sysconfdir}/rc.d/rc3.d/S35system-server
 %{_sysconfdir}/rc.d/rc5.d/S00system-server
 %{_bindir}/system_server
+/opt/etc/smack/accesses.d/system-server.rule
 %if 0%{?simulator}
 %exclude %{_bindir}/restart
 %else
-- 
2.7.4