From e6fa3325afdc85f577957782a10c74f30622403e Mon Sep 17 00:00:00 2001
From: Susnata Sovalin <s.sovalin@samsung.com>
Date: Fri, 20 Apr 2018 15:19:56 +0530
Subject: [PATCH] Dbus/Cynara Policy Fix

Change-Id: I72284113d9feb13f7b0dce2adb5c6edd0ad24a5d
Signed-off-by: Susnata Sovalin <s.sovalin@samsung.com>
---
 lbs-server/config/lbs-server.conf | 42 +++++++++++--------------------
 1 file changed, 14 insertions(+), 28 deletions(-)

diff --git a/lbs-server/config/lbs-server.conf b/lbs-server/config/lbs-server.conf
index 463d13d..723de62 100644
--- a/lbs-server/config/lbs-server.conf
+++ b/lbs-server/config/lbs-server.conf
@@ -5,45 +5,31 @@
 	<!-- root can own the service -->
 	<policy user="root">
 		<allow own="org.tizen.lbs.Providers.LbsServer"/>
-		<!-- Allow all methods on interfaces -->
 		<allow send_destination="org.tizen.lbs.Providers.LbsServer"/>
-		<allow receive_sender="org.tizen.lbs.Providers.LbsServer"/>
 	</policy>
 
 	<policy user="system">
 		<allow own="org.tizen.lbs.Providers.LbsServer"/>
 		<allow send_destination="org.tizen.lbs.Providers.LbsServer"/>
-		<allow receive_sender="org.tizen.lbs.Providers.LbsServer"/>
 	</policy>
 
-	<policy context="default">
+	<policy group="location">
 		<allow own="org.tizen.lbs.Providers.LbsServer"/>
+		<allow send_destination="org.tizen.lbs.Providers.LbsServer"/>
+	</policy>
+
+	<policy group="users">
+		<allow own="org.tizen.lbs.Providers.LbsServer"/>
+		<allow send_destination="org.tizen.lbs.Providers.LbsServer"/>
+	</policy>
+
+	<policy context="default">
+		<deny own="org.tizen.lbs.Providers.LbsServer"/>
 		<deny send_destination="org.tizen.lbs.Providers.LbsServer"/>
-		<allow send_type="signal" send_destination="org.tizen.lbs.Providers.LbsServer"/>
-		<allow receive_sender="org.tizen.lbs.Providers.LbsServer"/>
 
 		<check send_destination="org.tizen.lbs.Providers.LbsServer"
-				send_interface="org.tizen.lbs.Manager" privilege="http://tizen.org/privilege/location" />
-		<check send_destination="org.tizen.lbs.Providers.LbsServer"
-				send_interface="org.tizen.lbs.Position" privilege="http://tizen.org/privilege/location" />
-		<check send_destination="org.tizen.lbs.Providers.LbsServer"
-				send_interface="org.tizen.lbs.Nmea" privilege="http://tizen.org/privilege/location" />
-		<check send_destination="org.tizen.lbs.Providers.LbsServer"
-				send_interface="org.tizen.lbs.Satellite" privilege="http://tizen.org/privilege/location" />
-		<check send_destination="org.tizen.lbs.Providers.LbsServer"
-				send_interface="org.tizen.lbs.Batch" privilege="http://tizen.org/privilege/location" />
-
-		<check receive_sender="org.tizen.lbs.Providers.LbsServer"
-				receive_interface="org.tizen.lbs.Manager" privilege="http://tizen.org/privilege/location" />
-		<check receive_sender="org.tizen.lbs.Providers.LbsServer"
-				receive_interface="org.tizen.lbs.Position" privilege="http://tizen.org/privilege/location" />
-		<check receive_sender="org.tizen.lbs.Providers.LbsServer"
-				receive_interface="org.tizen.lbs.Position" privilege="http://tizen.org/privilege/location" />
-		<check receive_sender="org.tizen.lbs.Providers.LbsServer"
-				receive_interface="org.tizen.lbs.Nmea" privilege="http://tizen.org/privilege/location" />
-		<check receive_sender="org.tizen.lbs.Providers.LbsServer"
-				receive_interface="org.tizen.lbs.Satellite" privilege="http://tizen.org/privilege/location" />
-		<check receive_sender="org.tizen.lbs.Providers.LbsServer"
-				receive_interface="org.tizen.lbs.Batch" privilege="http://tizen.org/privilege/location" />
+			privilege="http://tizen.org/privilege/location"/>
+		<check receive_sender="org.tizen.lbs.Providers.LbsServer" receive_type="signal"
+			privilege="http://tizen.org/privilege/location"/>
 	</policy>
 </busconfig>
-- 
2.34.1