From f24c53fb208eca0307ab55d1ae9157118b15ab2a Mon Sep 17 00:00:00 2001
From: Karol Lewandowski <k.lewandowsk@samsung.com>
Date: Tue, 17 Dec 2019 14:58:15 +0100
Subject: [PATCH] crash-service: Restrict allow livedump API via privilege

Use newly created http://tizen.org/privilege/internal/livecoredump
privilege to restrict access to crash-service's livedump dbus
interface.

Change-Id: I9b2f560c061426d561674e3560b60c10e36c384e
---
 src/crash-service/crash-service.conf | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/src/crash-service/crash-service.conf b/src/crash-service/crash-service.conf
index 02bd574..7aac3d0 100644
--- a/src/crash-service/crash-service.conf
+++ b/src/crash-service/crash-service.conf
@@ -13,13 +13,12 @@
 		       send_interface="org.tizen.system.crash.livedump"
 		       send_member="livedump_pid"/>
 	</policy>
-	<policy user="stability_monitor">
-		<allow send_destination="org.tizen.system.crash.livedump"
-		       send_interface="org.tizen.system.crash.livedump"
-		       send_member="livedump_pid"/>
-	</policy>
 	<policy context="default">
 		<deny own="org.tizen.system.crash.livedump"/>
+		<check privilege="http://tizen.org/privilege/internal/livecoredump"
+		       send_destination="org.tizen.system.crash.livedump"
+		       send_interface="org.tizen.system.crash.livedump"
+		       send_member="livedump_pid"/>
 		<deny send_destination="org.tizen.system.crash.livedump"/>
 	</policy>
 </busconfig>
-- 
2.7.4