From 8e1d8d972f8fcd37ea78252abd8deb9fb7deecff Mon Sep 17 00:00:00 2001
From: sinikang <sinikang@samsung.com>
Date: Wed, 18 Apr 2018 12:08:36 +0900
Subject: [PATCH] Apply dbus/cynara policy

 - add default deny policy
 - add telephony group policy

Change-Id: I31fe1a089cf6d3467dd6a10c3ff9db06ec19a450
---
 packaging/tel-plugin-dbus_tapi.spec |  2 +-
 packaging/telephony.conf            | 11 ++++++++++-
 2 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/packaging/tel-plugin-dbus_tapi.spec b/packaging/tel-plugin-dbus_tapi.spec
index e230832..d93f7ec 100644
--- a/packaging/tel-plugin-dbus_tapi.spec
+++ b/packaging/tel-plugin-dbus_tapi.spec
@@ -1,6 +1,6 @@
 %define major 0
 %define minor 3
-%define patchlevel 92
+%define patchlevel 93
 
 Name:           tel-plugin-dbus_tapi
 Version:        %{major}.%{minor}.%{patchlevel}
diff --git a/packaging/telephony.conf b/packaging/telephony.conf
index 91a4fe6..a9373f7 100644
--- a/packaging/telephony.conf
+++ b/packaging/telephony.conf
@@ -7,7 +7,11 @@
         </policy>
 
         <policy context="default">
-                <allow send_destination="org.tizen.telephony" send_interface="org.tizen.telephony.Manager"/>
+                <deny own="org.tizen.telephony"/>
+                <deny send_destination="org.tizen.telephony"/>
+                <deny receive_sender="org.tizen.telephony"/>
+
+                <check send_destination="org.tizen.telephony" send_interface="org.tizen.telephony.Manager" send_member="GetModems"/>
                 <check send_destination="org.tizen.telephony" send_interface="org.freedesktop.DBus.Properties" send_member="Get" privilege="http://tizen.org/privilege/telephony"/>
                 <check receive_sender="org.tizen.telephony" receive_interface="org.freedesktop.DBus.Properties" privilege="http://tizen.org/privilege/telephony"/>
 
@@ -209,4 +213,9 @@
                 <check send_destination="org.tizen.telephony" send_interface="org.tizen.telephony.Sap" send_member="GetCardReaderStatus" privilege="http://tizen.org/privilege/telephony.admin"/>
                 <check receive_sender="org.tizen.telephony" receive_interface="org.tizen.telephony.Sap" privilege="http://tizen.org/privilege/telephony"/>
         </policy>
+        <policy group="telephony">
+                <allow own="org.tizen.telephony"/>
+                <allow send_destination="org.tizen.telephony"/>
+                <allow receive_sender="org.tizen.telephony"/>
+        </policy>
 </busconfig>
-- 
2.7.4