Apply dbus/cynara policy

 - add default deny policy
 - add telephony, network_fw policy

Change-Id: Ic46ba2724faef6ef16acec3d3c08b7b88429e8e1

diff --git a/packaging/tel-plugin-packetservice.spec b/packaging/tel-plugin-packetservice.spec
index b91d038..4506258 100644 (file)
--- a/packaging/tel-plugin-packetservice.spec
+++ b/packaging/tel-plugin-packetservice.spec
@@ -4,7 +4,7 @@
 
 %define major 0
 %define minor 4
-%define patchlevel 20
+%define patchlevel 21
 
 Name:           tel-plugin-packetservice
 Version:        %{major}.%{minor}.%{patchlevel}

diff --git a/packaging/tel-plugin-ps.conf b/packaging/tel-plugin-ps.conf
index e05be8c..49cd6ba 100644 (file)
--- a/packaging/tel-plugin-ps.conf
+++ b/packaging/tel-plugin-ps.conf
@@ -7,7 +7,12 @@
         </policy>
 
         <policy context="default">
+                <deny own="com.tcore.ps"/>
+                <deny send_destination="com.tcore.ps"/>
+                <deny receive_sender="com.tcore.ps"/>
+
                 <check send_destination="com.tcore.ps" send_interface="com.tcore.ps.master" send_member="GetModems" privilege="http://tizen.org/privilege/network.get"/>
+                <check send_destination="com.tcore.ps" send_interface="com.tcore.ps.master" send_member="SetAlwayson" privilege="http://tizen.org/privilege/telephony.admin">
                 <check receive_sender="com.tcore.ps" receive_interface="com.tcore.ps.master" privilege="http://tizen.org/privilege/telephony"/>
 
                 <check send_destination="com.tcore.ps" send_interface="com.tcore.ps.modem" send_member="GetProperties" privilege="http://tizen.org/privilege/telephony"/>
@@ -31,4 +36,13 @@
                 <check send_destination="com.tcore.ps" send_interface="com.tcore.ps.context" send_member="RemoveProfile" privilege="http://tizen.org/privilege/network.profile"/>
                 <check receive_sender="com.tcore.ps" receive_interface="com.tcore.ps.context" privilege="http://tizen.org/privilege/telephony"/>
         </policy>
-</busconfig>
\ No newline at end of file
+        <policy group="telephony">
+                <allow own="com.tcore.ps"/>
+                <allow send_destination="com.tcore.ps"/>
+                <allow receive_sender="com.tcore.ps"/>
+        </policy>
+        <policy group="network_fw">
+                <allow own="com.tcore.ps"/>
+                <allow receive_sender="com.tcore.ps"/>
+        </policy>
+</busconfig>