From 1235e37c3341fed1f73053832e8af6afdb469cbb Mon Sep 17 00:00:00 2001
From: "sanghyeok.oh" <sanghyeok.oh@samsung.com>
Date: Wed, 7 Mar 2018 18:54:58 +0900
Subject: [PATCH] dbus: modify dbus policy correctly

Change-Id: Id903a35e006f82be38b0b65fad818c9ac59d3364
Signed-off-by: sanghyeok.oh <sanghyeok.oh@samsung.com>
---
 conf/org.tizen.system.deviced.conf | 57 +++++++++++++++++++++++++++++++-------
 1 file changed, 47 insertions(+), 10 deletions(-)

diff --git a/conf/org.tizen.system.deviced.conf b/conf/org.tizen.system.deviced.conf
index 81086b6..fa226d9 100644
--- a/conf/org.tizen.system.deviced.conf
+++ b/conf/org.tizen.system.deviced.conf
@@ -1,22 +1,59 @@
 <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
 <busconfig>
+    <policy user="root">
+        <allow send_destination="org.tizen.system.deviced"/>
+        <allow own="org.tizen.system.storage"/>
+        <allow receive_sender="org.tizen.system.deviced"/>
+    </policy>
+
+    <policy user="system_fw">
+      <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.Battery" send_member="power_supply"/>
+      <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.ExtCon"/>
+      <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.SysNoti" send_member="getcontrol"/>
+      <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.SysNoti" send_member="control"/>
+    </policy>
+
+    <policy user="app_fw">
+        <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.Tzip"/>
+    </policy>
+
     <policy context="default">
-        <check send_destination="org.tizen.system.deviced"
-                send_interface="org.tizen.system.deviced.display"
+        <deny send_destination="org.tizen.system.deviced"/>
+        <allow send_destination="org.tizen.system.deviced" send_type="signal"/>
+
+        <check send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.display"
                 privilege="http://tizen.org/privilege/display"/>
-        <check send_destination="org.tizen.system.deviced"
-                send_interface="org.tizen.system.deviced.power"
+        <check send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.power"
                 privilege="http://tizen.org/privilege/power"/>
-        <check send_destination="org.tizen.system.deviced"
-                send_interface="org.tizen.system.deviced.reboot"
+        <check send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.reboot"
                 privilege="http://tizen.org/privilege/reboot"/>
-        <check send_destination="org.tizen.system.deviced"
-                send_interface="org.tizen.system.deviced.Led"
+        <check send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.Led"
                 privilege="http://tizen.org/privilege/led"/>
-        <check send_destination="org.tizen.system.deviced"
-                send_interface="org.tizen.system.deviced.ir"
+        <check send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.ir"
                 privilege="http://tizen.org/privilege/use_ir"/>
 
+        <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.Battery"/>
+          <deny send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.Battery" send_member="power_supply"/>
+          <check send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.Battery" send_member="SetLowbatLevel"
+                 privilege="http://tizen.org/privilege/systemsettings.admin"/>
+
+        <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.Core"/>
+        <deny send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.ExtCon"/>
+
+        <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.LowPower"/>
+
+        <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.SysNoti"/>
+          <deny send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.SysNoti" send_member="getcontrol"/>
+          <deny send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.SysNoti" send_member="control"/>
+
+        <deny send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.Tzip"/>
+        <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.Usb"/>
+        <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.Usbhost"/>
+        <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.UsbHostTest"/>
+        <allow send_destination="org.tizen.system.deviced" send_interface="org.tizen.system.deviced.PmQos"/>
+
+        <check receive_sender="org.tizen.system.deviced" receive_path="/Org/Tizen/System/DeviceD/Usbhost" receive_member="ChangedDevice" receive_type="signal"
+                privilege="http://tizen.org/feature/usb.host"/>
     </policy>
 </busconfig>
-- 
2.7.4