From fde631d3a4b1e0e14002bb753e0d4ebd7a5dd312 Mon Sep 17 00:00:00 2001
From: Yu Jiung <jiung.yu@samsung.com>
Date: Wed, 24 Feb 2016 16:23:06 +0900
Subject: [PATCH] Add Dbus configuration file

Change-Id: I15c6ca7395d416950f7aed8de4b49fa1cb82cdab
---
 packaging/capi-vpn-service.spec   |  4 ++++
 packaging/dbus-vpnsvc-daemon.conf | 17 +++++++++++++++++
 2 files changed, 21 insertions(+)
 create mode 100644 packaging/dbus-vpnsvc-daemon.conf

diff --git a/packaging/capi-vpn-service.spec b/packaging/capi-vpn-service.spec
index 95195dd..e901593 100755
--- a/packaging/capi-vpn-service.spec
+++ b/packaging/capi-vpn-service.spec
@@ -8,6 +8,7 @@ URL:        N/A
 Source0:    %{name}-%{version}.tar.gz
 Source1:    vpnsvc-daemon.service
 Source2:    org.tizen.vpnsvc.service
+Source3:    dbus-vpnsvc-daemon.conf
 BuildRequires:	cmake
 BuildRequires:	pkgconfig(dlog)
 BuildRequires:  pkgconfig(dbus-glib-1)
@@ -94,6 +95,8 @@ cp LICENSE-Apache.v2.0 %{buildroot}/%{_datadir}/license/capi-vpnsvc
 #cp LICENSE.APLv2 %{buildroot}/usr/share/license/fpasmtztransport
 
 %make_install
+mkdir -p %{buildroot}%{_sysconfdir}/dbus-1/system.d
+install -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/dbus-1/system.d/vpnsvc-daemon.conf
 mkdir -p %{buildroot}%{_libdir}/systemd/system
 install -m 0644 %{SOURCE1} %{buildroot}%{_libdir}/systemd/system/vpnsvc-daemon.service
 mkdir -p %{buildroot}%{_datadir}/dbus-1/system-services
@@ -115,6 +118,7 @@ fi
 %manifest daemon/vpnsvc-daemon.manifest
 %attr(0755,root,root) %{_bindir}/vpnsvc-daemon
 %defattr(-,root,root,-)
+%{_sysconfdir}/dbus-1/system.d/*.conf
 %{_libdir}/systemd/system/vpnsvc-daemon.service
 %{_datadir}/dbus-1/system-services/org.tizen.vpnsvc.service
 
diff --git a/packaging/dbus-vpnsvc-daemon.conf b/packaging/dbus-vpnsvc-daemon.conf
new file mode 100644
index 0000000..0040381
--- /dev/null
+++ b/packaging/dbus-vpnsvc-daemon.conf
@@ -0,0 +1,17 @@
+<!DOCTYPE busconfig PUBLIC
+ "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+        <policy user="root">
+                <allow own="org.tizen.vpnsvc"/>
+
+                <allow send_destination="org.tizen.vpnsvc"/>
+                <allow send_interface="org.tizen.vpnsvc"/>
+                <allow receive_sender="org.tizen.vpnsvc" receive_type="signal"/>
+        </policy>
+        <policy context="default">
+                <deny own="org.tizen.vpnsvc"/>
+                <deny send_destination="org.tizen.vpnsvc"/>
+                <deny send_interface="org.tizen.vpnsvc"/>
+        </policy>
+</busconfig>
-- 
2.7.4