From 366a4808f51e7e82c01350a3c40a63fe100f05b9 Mon Sep 17 00:00:00 2001
From: Jihoon Jung <jh8801.jung@samsung.com>
Date: Wed, 4 Apr 2018 14:51:00 +0900
Subject: [PATCH] Apply default deny in dbus configuration

Change-Id: Ib0b36be18cc3f648940d1b18ba567a552621d8cc
Signed-off-by: Jihoon Jung <jh8801.jung@samsung.com>
---
 packaging/org.tizen.SmartcardService.conf | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/packaging/org.tizen.SmartcardService.conf b/packaging/org.tizen.SmartcardService.conf
index bb362bb..0bfd4c2 100644
--- a/packaging/org.tizen.SmartcardService.conf
+++ b/packaging/org.tizen.SmartcardService.conf
@@ -2,7 +2,18 @@
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
 
 <busconfig>
-	<policy context="default">
+	<policy user="root">
+		<allow own="org.tizen.SmartcardService"/>
+		<allow send_destination="org.tizen.SmartcardService"/>
+	</policy>
+	<policy user="network_fw">
 		<allow own="org.tizen.SmartcardService"/>
+		<allow send_destination="org.tizen.SmartcardService"/>
+	</policy>
+	<policy context="default">
+		<deny own="org.tizen.SmartcardService"/>
+		<deny send_destination="org.tizen.SmartcardService"/>
+		<check own="org.tizen.SmartcardService" privilege="http://tizen.org/privilege/secureelement"/>
+		<check send_destination="org.tizen.SmartcardService" privilege="http://tizen.org/privilege/secureelement"/>
 	</policy>
 </busconfig>
-- 
2.7.4