Adjust manifest files to Tizen 3.0 Security model 87/38587/1
authorLukasz Wojciechowski <l.wojciechow@partner.samsung.com>
Wed, 22 Apr 2015 09:59:53 +0000 (11:59 +0200)
committerLukasz Wojciechowski <l.wojciechow@partner.samsung.com>
Wed, 22 Apr 2015 10:03:14 +0000 (12:03 +0200)
Remove old Smack based security domain mode known from Tizen 2.X.
Request "_" domain for file labeling as suggested in Three Domains Model.
Do not assign "_" label manually, as that is the default label and files
will receive it anyway.

Change-Id: Ic1735a2f8dffc8f142007d4e3f8dcf981ef90300

packaging/key-manager-listener.manifest
packaging/key-manager.manifest
packaging/libkey-manager-client.manifest

index c3b5d51..a76fdba 100644 (file)
@@ -1,13 +1,5 @@
 <manifest>
-       <define>
-               <domain name="key-manager-listener" />
-               <request>
-                       <smack request="pkgmgr::info" type="r" />
-                       <smack request="pkgmgr::db" type="rlx" />
-                       <smack request="ail::db" type="rlx" />
-               </request>
-       </define>
        <request>
-               <domain name="key-manager-listener" />
+               <domain name="_" />
        </request>
 </manifest>
index 195c0a5..a76fdba 100644 (file)
@@ -1,17 +1,5 @@
 <manifest>
-       <define>
-               <domain name="key-manager"/>
-               <request>
-                       <smack request="system::use_internet" type="w"/>
-               </request>
-               <permit>
-                       <smack permit="system::use_internet" type="w"/>
-               </permit>
-       </define>
        <request>
-               <domain name="key-manager" />
+               <domain name="_" />
        </request>
-       <assign>
-               <filesystem path="/etc/opt/upgrade/230.key-manager-migrate-dkek.patch.sh" label="_" exec_label="_"/>
-       </assign>
 </manifest>
index 4ab92dc..a76fdba 100644 (file)
@@ -1,10 +1,4 @@
 <manifest>
-       <assign>
-               <filesystem path="/usr/lib/libkey-manager-control-client.so.1.0.1" label="_"/>
-               <filesystem path="/usr/lib/libkey-manager-control-client.so.1" label="_"/>
-               <filesystem path="/usr/lib/libkey-manager-client.so.1.0.1" label="_"/>
-               <filesystem path="/usr/lib/libkey-manager-client.so.1" label="_"/>
-       </assign>
        <request>
                <domain name="_" />
        </request>