From: Wootak Jung <wootak.jung@samsung.com>
Date: Mon, 13 Aug 2018 08:18:06 +0000 (+0900)
Subject: Fix non-privilege methods deny issue
X-Git-Tag: accepted/tizen/unified/20180814.174914^0
X-Git-Url: http://review.tizen.org/git/?p=platform%2Fcore%2Fconnectivity%2Fbluetooth-agent.git;a=commitdiff_plain;h=d0d0fc909632be5ede8598ca1e77118605900a80

Fix non-privilege methods deny issue

non-privilege methods are denied after default deny policy was applied
- Rejected send message, 1 matched rules; type="method_call", sender=":1.84"
  (uid=5001 pid=925 comm="") interface="Org.Hfp.App.Interface" member="RegisterApplication"
  error name="(unset)" requested_reply="0" destination="org.bluez.ag_agent"
  privilege="(n/a)" (uid=551 pid=878 comm="")

Change-Id: I55aee8c1ab49a95fa52fea852f2ed8160008b5f9
---

diff --git a/ag-agent/bluetooth-ag-agent.conf.in b/ag-agent/bluetooth-ag-agent.conf.in
index c18a6bb..eeb652b 100644
--- a/ag-agent/bluetooth-ag-agent.conf.in
+++ b/ag-agent/bluetooth-ag-agent.conf.in
@@ -3,6 +3,7 @@
 <busconfig>
     <policy context="default">
         <deny own="org.bluez.ag_agent"/>
+        <allow send_destination="org.bluez.ag_agent" send_interface="Org.Hfp.App.Interface"/>
         <check send_destination="org.bluez.ag_agent" send_interface="Org.Hfp.App.Interface" send_member="CheckPrivilege" privilege="http://tizen.org/privilege/bluetooth.admin" />
         <check send_destination="org.bluez.ag_agent" send_interface="Org.Hfp.App.Interface" send_member="Play" privilege="http://tizen.org/privilege/bluetooth.admin" />
         <check send_destination="org.bluez.ag_agent" send_interface="Org.Hfp.App.Interface" send_member="Stop" privilege="http://tizen.org/privilege/bluetooth.admin" />
diff --git a/hf-agent/bluetooth-hf-agent.conf.in b/hf-agent/bluetooth-hf-agent.conf.in
index 4de8a4e..d98f2a9 100644
--- a/hf-agent/bluetooth-hf-agent.conf.in
+++ b/hf-agent/bluetooth-hf-agent.conf.in
@@ -3,6 +3,7 @@
 <busconfig>
     <policy context="default">
         <deny own="org.bluez.hf_agent"/>
+        <allow send_destination="org.bluez.hf_agent" send_interface="org.tizen.HfApp"/>
         <check send_destination="org.bluez.hf_agent" send_interface="org.tizen.HfApp" send_member="AnswerCall" privilege="http://tizen.org/privilege/bluetooth.admin" />
         <check send_destination="org.bluez.hf_agent" send_interface="org.tizen.HfApp" send_member="TerminateCall" privilege="http://tizen.org/privilege/bluetooth.admin" />
         <check send_destination="org.bluez.hf_agent" send_interface="org.tizen.HfApp" send_member="InitiateCall" privilege="http://tizen.org/privilege/bluetooth.admin" />