From 4ee316328fe46bc87d2bee2c661c6f1d64695de8 Mon Sep 17 00:00:00 2001
From: Jeesun Kim <iamjs.kim@samsung.com>
Date: Tue, 10 Apr 2018 18:16:11 +0900
Subject: [PATCH] dbus-policy: add rule default deny own

Change-Id: Ib48376012efbbc9eac9f97b92f3ccaee5de89e8f
---
 packaging/calendar-service.conf.in | 19 ++++++++-----------
 1 file changed, 8 insertions(+), 11 deletions(-)

diff --git a/packaging/calendar-service.conf.in b/packaging/calendar-service.conf.in
index ab1e9b7..d49dcd1 100644
--- a/packaging/calendar-service.conf.in
+++ b/packaging/calendar-service.conf.in
@@ -2,18 +2,15 @@
 <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
 <busconfig>
-    <policy user="root">
-        <allow own="@DBUS_INTERFACE@"/>
-		<allow send_destination="@DBUS_INTERFACE@" send_interface="@DBUS_INTERFACE@"/>
-		<allow receive_sender="@DBUS_INTERFACE@"/>
-    </policy>
-    <policy user="system">
-        <allow own="@DBUS_INTERFACE@"/>
-		<allow send_destination="@DBUS_INTERFACE@" send_interface="@DBUS_INTERFACE@"/>
-		<allow receive_sender="@DBUS_INTERFACE@"/>
-    </policy>
     <policy context="default">
-        <allow send_destination="@DBUS_INTERFACE@"/>
+		<deny send_destination="@DBUS_INTERFACE@"/>
+		<allow send_destination="@DBUS_INTERFACE@" send_type="signal"/>
+		<check send_destination="@DBUS_INTERFACE@"
+				send_interface="@DBUS_INTERFACE@" send_member="register_resource"
+				/>
+		<check send_destination="@DBUS_INTERFACE@"
+				send_interface="@DBUS_INTERFACE@" send_member="unregister_resource"
+				/>
 		<check send_destination="@DBUS_INTERFACE@"
 				send_interface="@DBUS_INTERFACE@" send_member="check_permission_write"
 				privilege="http://tizen.org/privilege/calendar.write"/>
-- 
2.7.4