Modification about smack label of db file belong to process. 17/20617/2 tizen
authorjooseong.lee <jooseong.lee@samsung.com>
Fri, 9 May 2014 12:49:59 +0000 (21:49 +0900)
committerjooseong lee <jooseong.lee@samsung.com>
Fri, 9 May 2014 12:49:42 +0000 (05:49 -0700)
[Problem]
Most db files have 'floor' label.  Because these are created during image creation time.
Therefore no process can write the dbs (since 'floor' label allows only read and execute)

[Solution]
Modify smack label of the db files based on condition below referring three domain model
Condition1. Assign domain of process which creates db files
Condition2. Assign domain of process accesses db files.

Change-Id: I99fe44ceff2db79cfff0237e13574919580b8877
Signed-off-by: jooseong.lee <jooseong.lee@samsung.com>
packaging/libslp-alarm.spec

index 764c6e9..9e5b32c 100644 (file)
@@ -125,6 +125,7 @@ chmod 660 /opt/dbspace/.alarm.db-journal
 #chmod 600 /opt/dbspace/.alarm.db
 #chmod 600 /opt/dbspace/.alarm.db-journal
 
+chsmack -a 'User' /opt/dbspace/.alarm.db*
 
 %postun -p /sbin/ldconfig