From c1014be773f56b9b6914b605a2fa0053828c0ed8 Mon Sep 17 00:00:00 2001
From: "pr.jung" <pr.jung@samsung.com>
Date: Fri, 11 Sep 2015 13:11:14 +0900
Subject: [PATCH] Apply dbus-cynara rule for deviced

dbus method call which has privilege only allowed

Change-Id: I85e7056d6097130db8ab56ddd91f2a21f38d4e13
Signed-off-by: pr.jung <pr.jung@samsung.com>
---
 scripts/deviced.conf | 36 ++++++++++++++++++++++++++++++------
 1 file changed, 30 insertions(+), 6 deletions(-)

diff --git a/scripts/deviced.conf b/scripts/deviced.conf
index 51ca6a0..a5846bd 100644
--- a/scripts/deviced.conf
+++ b/scripts/deviced.conf
@@ -4,13 +4,37 @@
     <policy user="root">
         <allow own="org.tizen.system.deviced"/>
         <allow send_destination="org.tizen.system.deviced"/>
-        <allow send_interface="org.tizen.system.deviced.display"/>
-    </policy>
-    <policy at_console="true">
-        <allow send_destination="org.tizen.system.deviced"/>
     </policy>
+
     <policy context="default">
-        <deny own="org.tizen.system.deviced"/>
-        <allow send_destination="org.tizen.system.deviced"/>
+        <deny send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.display"/>
+        <deny send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.power"/>
+        <deny send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.storage"/>
+        <deny send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.led"/>
+        <deny send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.haptic"/>
+
+        <check send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.display"
+                privilege="http://tizen.org/privilege/display"/>
+        <check send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.power"
+                privilege="http://tizen.org/privilege/power"/>
+        <check send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.storage"
+                privilege="http://tizen.org/privilege/externalstorage"/>
+        <check send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.storage"
+                privilege="http://tizen.org/privilege/mediastorage"/>
+        <check send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.led"
+                privilege="http://tizen.org/privilege/led"/>
+        <check send_destination="org.tizen.system.deviced"
+                send_interface="org.tizen.system.deviced.haptic"
+                privilege="http://tizen.org/privilege/haptic"/>
     </policy>
 </busconfig>
-- 
2.7.4