From dd5b0c8a4739b771dbe16d844825f1ab7435ab0f Mon Sep 17 00:00:00 2001 From: Jaehwan Kim Date: Tue, 8 Sep 2015 15:55:23 +0900 Subject: [PATCH] ecore_evas_extn: change the lock file path. The lock file can be accecced by any application. But in Tizen, it needs SMACK rule. @tizen_feature Change-Id: I6daf97702e736e34ec0fc2b80ec247ca39e91239 --- packaging/efl.conf | 3 +++ packaging/efl.spec | 4 ++++ src/modules/ecore_evas/engines/extn/ecore_evas_extn_buf.c | 5 ++++- 3 files changed, 11 insertions(+), 1 deletion(-) create mode 100644 packaging/efl.conf diff --git a/packaging/efl.conf b/packaging/efl.conf new file mode 100644 index 0000000..5d71ddd --- /dev/null +++ b/packaging/efl.conf @@ -0,0 +1,3 @@ +d /run/.ecore 1770 display users +t /run/.ecore - - - - security.SMACK64="User::App::Shared" +t /run/.ecore - - - - security.SMACK64TRANSMUTE="TRUE" diff --git a/packaging/efl.spec b/packaging/efl.spec index cc0e7d4..3bffc0c 100644 --- a/packaging/efl.spec +++ b/packaging/efl.spec @@ -9,6 +9,7 @@ Summary: Enlightenment Foundation Libraries - set of libraries used (not Url: http://enlightenment.org/ Group: Graphics & UI Framework/API Source: %{name}-%{version}.tar.bz2 +Source100: efl.conf Source1001: efl.manifest BuildRequires: pkgconfig(check) @@ -641,6 +642,8 @@ CFLAGS+=" -DMESA_EGL_NO_X11_HEADERS " #make datadir=%{buildroot}%{_datadir} install-examples rm -rf %{buildroot}%{_libdir}/ecore/system/upower +mkdir -p %{buildroot}%{_tmpfilesdir} +install -m 0644 %SOURCE100 %{buildroot}%{_tmpfilesdir}/efl.conf %post -n eina -p /sbin/ldconfig %postun -n eina -p /sbin/ldconfig @@ -868,6 +871,7 @@ grep --silent ECORE_IMF_MODULE "$f" \ %{_libdir}/ecore_buffer/modules/*/*/module.so %{_datadir}/ecore/checkme %{_datadir}/ecore_*/checkme +%{_tmpfilesdir}/efl.conf #%files -n ecore-examples #%manifest %{name}.manifest diff --git a/src/modules/ecore_evas/engines/extn/ecore_evas_extn_buf.c b/src/modules/ecore_evas/engines/extn/ecore_evas_extn_buf.c index 31f83dc..7326848 100644 --- a/src/modules/ecore_evas/engines/extn/ecore_evas_extn_buf.c +++ b/src/modules/ecore_evas/engines/extn/ecore_evas_extn_buf.c @@ -49,7 +49,10 @@ _extnbuf_new(const char *base, int id, Eina_Bool sys, int num, s = getenv("XDG_RUNTIME_DIR"); if (!s) s = getenv("TMPDIR"); } - if (!s) s = "/tmp"; + //TIZEN ONLY (150908): security issue. To access any application, it needs smack rule. + //if (!s) s = "/tmp"; + s = "/run/.ecore"; + // snprintf(file, sizeof(file), "%s/ee-lock-XXXXXX", s); b->lockfd = mkstemp(file); if (b->lockfd < 0) goto err; -- 2.7.4