Fix non-privilege methods deny issue 63/186663/1 accepted/tizen/unified/20180814.174914 submit/tizen/20180813.231906
authorWootak Jung <wootak.jung@samsung.com>
Mon, 13 Aug 2018 08:18:06 +0000 (17:18 +0900)
committerWootak Jung <wootak.jung@samsung.com>
Mon, 13 Aug 2018 08:18:06 +0000 (17:18 +0900)
non-privilege methods are denied after default deny policy was applied
- Rejected send message, 1 matched rules; type="method_call", sender=":1.84"
  (uid=5001 pid=925 comm="") interface="Org.Hfp.App.Interface" member="RegisterApplication"
  error name="(unset)" requested_reply="0" destination="org.bluez.ag_agent"
  privilege="(n/a)" (uid=551 pid=878 comm="")

Change-Id: I55aee8c1ab49a95fa52fea852f2ed8160008b5f9

ag-agent/bluetooth-ag-agent.conf.in
hf-agent/bluetooth-hf-agent.conf.in

index c18a6bb..eeb652b 100644 (file)
@@ -3,6 +3,7 @@
 <busconfig>
     <policy context="default">
         <deny own="org.bluez.ag_agent"/>
+        <allow send_destination="org.bluez.ag_agent" send_interface="Org.Hfp.App.Interface"/>
         <check send_destination="org.bluez.ag_agent" send_interface="Org.Hfp.App.Interface" send_member="CheckPrivilege" privilege="http://tizen.org/privilege/bluetooth.admin" />
         <check send_destination="org.bluez.ag_agent" send_interface="Org.Hfp.App.Interface" send_member="Play" privilege="http://tizen.org/privilege/bluetooth.admin" />
         <check send_destination="org.bluez.ag_agent" send_interface="Org.Hfp.App.Interface" send_member="Stop" privilege="http://tizen.org/privilege/bluetooth.admin" />
index 4de8a4e..d98f2a9 100644 (file)
@@ -3,6 +3,7 @@
 <busconfig>
     <policy context="default">
         <deny own="org.bluez.hf_agent"/>
+        <allow send_destination="org.bluez.hf_agent" send_interface="org.tizen.HfApp"/>
         <check send_destination="org.bluez.hf_agent" send_interface="org.tizen.HfApp" send_member="AnswerCall" privilege="http://tizen.org/privilege/bluetooth.admin" />
         <check send_destination="org.bluez.hf_agent" send_interface="org.tizen.HfApp" send_member="TerminateCall" privilege="http://tizen.org/privilege/bluetooth.admin" />
         <check send_destination="org.bluez.hf_agent" send_interface="org.tizen.HfApp" send_member="InitiateCall" privilege="http://tizen.org/privilege/bluetooth.admin" />