summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
jooseong.lee [Mon, 12 May 2014 02:28:39 +0000 (11:28 +0900)]
Modification about smack label of db file belong to process.
[Problem]
Most db files have 'floor' label. Because these are created during image creation time.
Therefore no process can write the dbs (since 'floor' label allows only read and execute)
[Solution]
Modify smack label of the db files based on condition below referring three domain model
Condition1. Assign domain of process which creates db files
Condition2. Assign domain of process accesses db files.
Change-Id: Ib3e0f1f36865658de4404eb007bf85f6269800ff
Signed-off-by: jooseong.lee <jooseong.lee@samsung.com>
Jean-Benoit MARTIN [Mon, 7 Apr 2014 12:46:24 +0000 (14:46 +0200)]
fix Multi-user macro
Bug-Tizen: PTREL-381
Change-Id: If80a3f9bd694c9822b4d522487374d19df0da1a9
Signed-off-by: Jean-Benoit MARTIN <jean-benoit.martin@open.eurogiciel.org>
brianjjones [Mon, 31 Mar 2014 22:10:30 +0000 (15:10 -0700)]
Further changes needed to fix TIVI-2937
Change-Id: I8e01d0bcbe375372f5cdcbdcfced34ef9db07d61
Signed-off-by: brianjjones <brian.j.jones@intel.com>
Ulf Hofemeier [Fri, 28 Mar 2014 15:42:43 +0000 (08:42 -0700)]
Change packagemanager.install to partner fixing TIVI-2937
To install/uninstall WRT packages IVI app manager
requires partner level privilege to use the PackageRepository API.
Change-Id: Iac5714a23ae31684169379be85b9de80da1db7e6
Signed-off-by: Ulf Hofemeier <ulf.hofemeier@linux.intel.com>
Jean-Benoit MARTIN [Thu, 19 Dec 2013 15:46:01 +0000 (16:46 +0100)]
Remove hardcoded path for multiuser support
Bug-Tizen: PTREL-381
Change-Id: If74f18714ae585af7c7e7f0b6c269f3367475e7b
Signed-off-by: Jean-Benoit MARTIN <jean-benoit.martin@open.eurogiciel.org>
Baptiste DURAND [Thu, 14 Nov 2013 17:53:43 +0000 (18:53 +0100)]
Fix build for x64 arch Use %_unitdir macro for systemd service path
Change-Id: Idb2443e04ca1a0d961cb3bdb173876fa5448ba1e
Signed-off-by: Baptiste DURAND <baptiste.durand@eurogiciel.fr>
Yoonsoo Kim [Fri, 8 Nov 2013 01:06:20 +0000 (17:06 -0800)]
Merge "Tizen policy change for untrusted widgets" into tizen
varinder.p [Wed, 6 Nov 2013 07:24:18 +0000 (16:24 +0900)]
Removed unwanted assertion from shutdown, caused SIGABRT on stop.
Change-Id: I047dbe54e4270e4a5974fea546d6164517c66950
Signed-off-by: varinder.p <varinder.p@samsung.com>
Rusty Lynch [Sat, 2 Nov 2013 00:51:37 +0000 (17:51 -0700)]
TIVI-2074: Remove smack labels from socket activation file
We have to remove use of the Tizen 2.2 smack labels until the
the Tizen 3.0 security domains are in place. Otherwise nothing
can communicate with anthing else.
Change-Id: I3ec2c0079ffe2178034118c807faaadf28e81b38
Signed-off-by: Rusty Lynch <rusty.lynch@intel.com>
Ashish Mehta [Wed, 30 Oct 2013 09:47:54 +0000 (15:17 +0530)]
Tizen policy change for untrusted widgets
It is decided that untrusted widget( It means an widget application of which a root certificate of signed certificate is not registered in Tizen Platform) should be blocked to use public privilege APIs.
For preventing using API, TizenPolicy.xml file should be modified.
Change-Id: Id70a300762c6843b282f39329782491055a20419
Signed-off-by: Ashish Mehta <ashish.mehta@samsung.com>
Rusty Lynch [Wed, 30 Oct 2013 20:47:38 +0000 (13:47 -0700)]
Merge "Fix .service and install it into dbus system service directory" into tizen
Hyunwoo Kim [Wed, 23 Oct 2013 07:34:41 +0000 (16:34 +0900)]
Change DB operaion
When widget info of an application is deleted, delete corresponded AceRequestedDevCap and AceAcceptedFeature.
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Change-Id: I53ef6645b427dc5d861968ce99e0d7f2b27926fa
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Chengwei Yang [Thu, 17 Oct 2013 08:38:27 +0000 (16:38 +0800)]
Fix .service and install it into dbus system service directory
In Tizen 3.0, dbus will running with an unprivileged user 'dbus' and use
an setuid servicehelper to activate system service, which should be
installed into the system-service directory if it provides system wide
service, and "User=" field is must to have to servicehelper.
Bug: https://bugs.tizen.org/jira/browse/PTREL-124
Change-Id: Iaa0c1107a79f5a253c7e75866b19a8b2d32c4bd8
Signed-off-by: Chengwei Yang <chengwei.yang@intel.com>
Rusty Lynch [Wed, 16 Oct 2013 23:09:51 +0000 (16:09 -0700)]
Update changelog for release
Change-Id: I78a9b095d8376d276d29be62d1eeb362fcaaf310
Signed-off-by: Rusty Lynch <rusty.lynch@intel.com>
Rusty Lynch [Thu, 29 Aug 2013 15:30:04 +0000 (08:30 -0700)]
TIVI-1685: Add Speech API to Tizen policy
Change-Id: I5bd294f28dac28d517c0b5f7c937cb2a5262a21c
Signed-off-by: Rusty Lynch <rusty.lynch@intel.com>
Kevron Rees [Wed, 24 Jul 2013 01:55:39 +0000 (18:55 -0700)]
TIVI-1467: Add vehicle API to the Tizen Policy
The WRT requires advanced knowlege of all APIs in the form of a
policy file.
Change-Id: I15f9e608e0749fb18c6e479e4d957f47eca7156c
Signed-off-by: Rusty Lynch <rusty.lynch@intel.com>
Michael Leibowitz [Wed, 16 Oct 2013 22:52:36 +0000 (15:52 -0700)]
remove hard-coded chsmack
This removes a block to wrt working. This needs to be re-worked as we
go to the three domain model
Change-Id: I29e9823c03073bbcf9154c30ef614637c649384b
Signed-off-by: Michael Leibowitz <michael.leibowitz@intel.com>
Hyunwoo Kim [Thu, 26 Sep 2013 09:05:35 +0000 (18:05 +0900)]
Add device cap Api and move ecore main loop
Change-Id: I36f83408ff41e2d40a5e04c3a23c401fa96dcff0
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Michael Demeter [Tue, 10 Sep 2013 19:41:02 +0000 (12:41 -0700)]
Reset manifest to default floor domain
Change-Id: Ia4dead4dfd5ea698e664a6b69976b80f3f7ea334
Signed-off-by: Michael Demeter <michael.demeter@intel.com>
Hyunwoo Kim [Mon, 9 Sep 2013 07:44:51 +0000 (16:44 +0900)]
Merge branch 'tizen_2.2' of ssh://review.tizendev.org:29418/framework/web/wrt-security into tizen
Conflicts:
packaging/wrt-security.changes
packaging/wrt-security.manifest
packaging/wrt-security.spec
src/services/ace/logic/simple_roaming_agent.cpp
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Rusty Lynch [Thu, 29 Aug 2013 15:30:04 +0000 (08:30 -0700)]
TIVI-1685: Add Speech API to Tizen policy
Change-Id: Id9df833bc82d0ffbb2e97bd1d87ead3f3ff6a278
Hyunwoo Kim [Thu, 29 Aug 2013 01:29:51 +0000 (10:29 +0900)]
Add exception handling code
Change-Id: Ibafa2ed96fc33fdbd3604e4e843e4ec2cce9af1a
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Wed, 21 Aug 2013 01:58:21 +0000 (10:58 +0900)]
Remove ace_check_access API
Change-Id: I1e3b14d01304b9b7dfd6144a7f5f5227bbef1b28
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Wed, 21 Aug 2013 01:32:37 +0000 (10:32 +0900)]
remove roaming attribute
Change-Id: I103394722d0d0b72777b03586eefa967c23ac680
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Mon, 5 Aug 2013 07:37:49 +0000 (16:37 +0900)]
Remove logs and Add ACE API that returns privacy access checking result.
Change-Id: I039d17bfd8c16e661c515269dc24140aeb85eff6
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Kevron Rees [Wed, 24 Jul 2013 01:55:39 +0000 (18:55 -0700)]
TIVI-1467: Add vehicle API to the Tizen Policy
The WRT requires advanced knowlege of all APIs in the form of a
policy file.
Change-Id: I5a45869ac886b599b441f78274186d7cdb3e26ad
Patrick McCarty [Wed, 17 Jul 2013 20:26:31 +0000 (13:26 -0700)]
Fix manifest installation
Change-Id: Iabf219e46bfbc37214b4ad29819c90fb9da04246
Signed-off-by: Patrick McCarty <patrick.mccarty@linux.intel.com>
Hyunwoo Kim [Mon, 15 Jul 2013 13:29:11 +0000 (22:29 +0900)]
Fix memory leaks
Change-Id: Id98dad64da604932776142f6a04e8d8565d9e443
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Ryan Ware [Mon, 8 Jul 2013 17:06:27 +0000 (10:06 -0700)]
Merge "resetting manifest requested domain to floor" into tizen
Alexandru Cornea [Wed, 3 Jul 2013 10:27:09 +0000 (13:27 +0300)]
removing chsmack
Alexandru Cornea [Fri, 28 Jun 2013 17:11:24 +0000 (20:11 +0300)]
resetting manifest requested domain to floor
Rusty Lynch [Thu, 27 Jun 2013 16:29:55 +0000 (09:29 -0700)]
Fix runtime breakage
Stop asserting on platforms that do not have a telephony stack
Change-Id: I6d17a3a70b5aa4ce93930c791a9aac3459cf1139
Hyunwoo Kim [Wed, 26 Jun 2013 05:41:31 +0000 (14:41 +0900)]
Add new policies
Change-Id: I2d31746c65d2910150496f8a7cca55c588fdd766
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Mon, 24 Jun 2013 12:07:09 +0000 (21:07 +0900)]
Add application.info policy
Change-Id: I00017074e7ec5065a230372c117912113bdce557
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Baptiste DURAND [Wed, 19 Jun 2013 13:25:51 +0000 (15:25 +0200)]
Add Changelog
Baptiste DURAND [Wed, 19 Jun 2013 13:21:21 +0000 (15:21 +0200)]
Fix RPMLINT Rules
Baptiste DURAND [Wed, 19 Jun 2013 13:21:00 +0000 (15:21 +0200)]
Fix path for systemd services
Jaewon Lee [Wed, 19 Jun 2013 05:12:22 +0000 (05:12 +0000)]
Merge changes Ia03c4243,I8e581657 into tizen_2.2
* changes:
wrt-security - init scripts removal
wrt-security - add systemd support
Jacek Pielaszkiewicz [Tue, 18 Jun 2013 14:41:25 +0000 (16:41 +0200)]
wrt-security - init scripts removal
Change-Id: Ia03c42431a2f00cd0034586d40f4b4697c4399bb
Signed-off-by: Jacek Pielaszkiewicz <j.pielaszkie@samsung.com>
Jacek Pielaszkiewicz [Tue, 18 Jun 2013 14:28:25 +0000 (16:28 +0200)]
wrt-security - add systemd support
The folling changes has been implemented.
1. systemd socket activation. Update in void SecuritySocketService::initialize()
and SecuritySocketService::mainLoop() methods to get scoket created by systemd.
2. enable sd_notify() to be called after the service startup.
Change-Id: I8e5816572be9759fb07c3875a1dc0346b2fdacaf
Signed-off-by: Jacek Pielaszkiewicz <j.pielaszkie@samsung.com>
Hyunwoo Kim [Mon, 17 Jun 2013 05:59:15 +0000 (14:59 +0900)]
Fix prevent warning
Change-Id: I75e8982fd09499d305f1d8a36491ffb2928cffac
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Wed, 5 Jun 2013 05:47:06 +0000 (14:47 +0900)]
Change Secure Element privilege level
Change-Id: Idd0ebd3a494f34519cf6a73b44a1ae8c5508c3d3
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Thu, 23 May 2013 08:24:01 +0000 (17:24 +0900)]
Daemon consolidation with privacy-manager
Change-Id: I7bc0edbd9fc15a7911f00de4094990b82be7054d
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Fri, 10 May 2013 08:55:14 +0000 (17:55 +0900)]
smack merge
Change-Id: I53d086c161190504db48f2442c062ae633c37b5a
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Wed, 8 May 2013 14:10:42 +0000 (23:10 +0900)]
Add testautomation dev cap
Change-Id: I3d65767a346b786dfc40d1bb18b5b80207cc0590
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Tue, 7 May 2013 12:54:07 +0000 (21:54 +0900)]
Increase socket timeout
Change-Id: I38c886b88931d60f775706a4f905fca9ef37ebea
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Tue, 7 May 2013 05:35:21 +0000 (14:35 +0900)]
Fix not to install rpm manifest
Change-Id: I421323a8489948f55ed427b708f1ad677c6a3d5f
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Mon, 22 Apr 2013 12:03:33 +0000 (21:03 +0900)]
check privacy by widget handle
Change-Id: Ib19c2d9ac891d5ba00e2bdef231d6f987df9b430
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Fri, 19 Apr 2013 10:49:03 +0000 (19:49 +0900)]
Block OSCP operations
Change-Id: I9be805880feb29aeb1478a70ff21678e797f7a3f
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Tue, 16 Apr 2013 08:43:21 +0000 (17:43 +0900)]
Fix build error
Change-Id: If1bd5078a80c18c096ead4e0e9334e8d972c5280
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Sat, 13 Apr 2013 14:57:44 +0000 (23:57 +0900)]
Fix Prevent warning
Change-Id: I4c023a6be67da74e1d27580257262f6266d84a91
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Anas Nashif [Sat, 13 Apr 2013 09:35:00 +0000 (18:35 +0900)]
Merge "Fix build with Gcc 4.7." into tizen_2.1
Junfeng Dong [Thu, 11 Apr 2013 12:07:33 +0000 (20:07 +0800)]
Fix build with Gcc 4.7.
Change-Id: Id4497d619889173a645d6899d7c37d843f2f408f
Hyunwoo Kim [Thu, 11 Apr 2013 06:25:00 +0000 (15:25 +0900)]
remove messageport dev cap
Change-Id: I98f4d1630233ab84cde1f0fa77ab478d3c6b6bd6
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Wed, 10 Apr 2013 10:52:11 +0000 (19:52 +0900)]
Change MessagePort privilege level
Change-Id: Iee79a9c2ca1ba963fa5787c14751c0ae4d60b18c
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Tue, 9 Apr 2013 16:04:30 +0000 (01:04 +0900)]
Check privacy and modify fingerprint list
Change-Id: I97e5c0e27f85f5092bc738048213d565358a5c77
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Sun, 31 Mar 2013 11:04:43 +0000 (20:04 +0900)]
Add new certificates
Change-Id: Ie2e955f045d7d39464553c596956995dbb000731
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
fangx.li [Wed, 3 Apr 2013 03:13:54 +0000 (12:13 +0900)]
Merge "Fix for 64 bit compatibility." into tizen_2.1
Junfeng Dong [Mon, 25 Mar 2013 12:37:33 +0000 (20:37 +0800)]
Fix for 64 bit compatibility.
- Fix hardcoding path.
- Use %cmake to set default paths.
Change-Id: Id07cd9900d16f9236905b9c67b561c5ce7049057
Yong Wang [Tue, 2 Apr 2013 07:49:56 +0000 (16:49 +0900)]
Merge "Do not wake up until necessary" into tizen_2.1
Hyunwoo Kim [Fri, 29 Mar 2013 18:23:02 +0000 (03:23 +0900)]
modify se
Change-Id: Ifc3d11c4fb0cf99c98f644605e7dce833b214d52
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Thu, 28 Mar 2013 11:35:47 +0000 (20:35 +0900)]
Modify se device capability. Rename to secureelement.
Change-Id: I620809a3fb63778f9493e69c5a266227a5fbf908
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Wed, 27 Mar 2013 02:55:33 +0000 (11:55 +0900)]
Modify public policy fingerprint
Change-Id: Ib7a989d6a3148ae9e41869e406dc45921642c359
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Hyunwoo Kim [Tue, 26 Mar 2013 07:53:10 +0000 (16:53 +0900)]
Modify Policy
Change-Id: I3c167f4f542385c999315c92b227503728eeb57e
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Yong Wang [Mon, 25 Mar 2013 08:17:51 +0000 (16:17 +0800)]
Do not wake up until necessary
wrt-security-daemon currently wakes up ten times per seconds for no good
reason. This will prevent CPU from staying in low power state and thus
consume more power. This patch will let wrt-security-daemon wake up only
until necessary.
Signed-off-by: Yong Wang <yong.y.wang@intel.com>
Hyunwoo Kim [Thu, 21 Mar 2013 09:22:48 +0000 (18:22 +0900)]
Update policy for platform level
Change-Id: Iacd7179fe07e9d6f58ab685b48c1adeca3a7c1e4
Signed-off-by: Hyunwoo Kim <hwlove.kim@samsung.com>
Jinkun Jang [Fri, 15 Mar 2013 16:22:00 +0000 (01:22 +0900)]
merge with master
Jinkun Jang [Thu, 14 Mar 2013 06:25:32 +0000 (15:25 +0900)]
sync
Jinkun Jang [Tue, 12 Mar 2013 17:05:56 +0000 (02:05 +0900)]
Tizen 2.1 base
Kibum Kim [Mon, 27 Feb 2012 12:16:54 +0000 (21:16 +0900)]
tizen beta release
projects / platform / framework / web / wrt-security.git / log