diff options
Diffstat (limited to 'policy/TizenPolicy.xml')
| -rw-r--r-- | policy/TizenPolicy.xml | 943 |
1 files changed, 943 insertions, 0 deletions
diff --git a/policy/TizenPolicy.xml b/policy/TizenPolicy.xml new file mode 100644 index 0000000..1a68d62 --- /dev/null +++ b/policy/TizenPolicy.xml @@ -0,0 +1,943 @@ +<policy-set id="Tizen-Policy" combine="first-matching-target"> + <policy id="Tizen-Policy-Plaform-API" description="Plaform API" combine="permit-overrides"> + <target> + <!-- platform API --> + </target> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="tizen" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="alarm" /> + </condition> + </rule> + + <!-- access to application --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="application.launch" /> + <resource-match attr="device-cap" func="equal" match="appmanager.kill" /> + <resource-match attr="device-cap" func="equal" match="application.info" /> + <resource-match attr="device-cap" func="equal" match="appmanager.certificate" /> + </condition> + </rule> + + <!-- access to bookmark --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="bookmark.read" /> + <resource-match attr="device-cap" func="equal" match="bookmark.write" /> + </condition> + </rule> + + <!-- access to package --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="packagemanager.install" /> + <resource-match attr="device-cap" func="equal" match="package.info" /> + </condition> + </rule> + + <!-- access to bluetooth --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="bluetoothmanager" /> + <resource-match attr="device-cap" func="equal" match="bluetooth.admin" /> + <resource-match attr="device-cap" func="equal" match="bluetooth.gap" /> + <resource-match attr="device-cap" func="equal" match="bluetooth.spp" /> + <resource-match attr="device-cap" func="equal" match="bluetooth.health" /> + </condition> + </rule> + + <!-- access to calendar --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="calendar.read" /> + <resource-match attr="device-cap" func="equal" match="calendar.write" /> + </condition> + </rule> + + <!-- access to call history --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="callhistory.read" /> + <resource-match attr="device-cap" func="equal" match="callhistory.write" /> + </condition> + </rule> + + <!-- access to contact --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="contact.read" /> + <resource-match attr="device-cap" func="equal" match="contact.write" /> + </condition> + </rule> + + <!-- access to content --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="content.read" /> + <resource-match attr="device-cap" func="equal" match="content.write" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="datacontrol.consumer" /> + </condition> + </rule> + + <!-- access to download feature --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="download" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="filesystem.read" /> + <resource-match attr="device-cap" func="equal" match="filesystem.write" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="messaging.read" /> + <resource-match attr="device-cap" func="equal" match="messaging.write" /> + <!-- keep --> + <resource-match attr="device-cap" func="equal" match="messaging.send" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="networkbearerselection" /> + </condition> + </rule> + + <!-- access to NFC --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="nfc.admin" /> + <resource-match attr="device-cap" func="equal" match="nfc.tag" /> + <resource-match attr="device-cap" func="equal" match="nfc.p2p" /> + <resource-match attr="device-cap" func="equal" match="nfc.cardemulation" /> + <resource-match attr="device-cap" func="equal" match="nfc.common" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="notification" /> + </condition> + </rule> + + <!-- access to power feature --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="power" /> + </condition> + </rule> + + <!-- access to datasync --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="datasync" /> + </condition> + </rule> + + <!-- access to push feature --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="push" /> + </condition> + </rule> + + <!-- access to system setting --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="setting" /> + </condition> + </rule> + + <!-- access to systeminfo --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="system.info" /> + <resource-match attr="device-cap" func="equal" match="systemmanager.info" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="systemmanager" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="secureelement" /> + <resource-match attr="device-cap" func="equal" match="se" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="allshare" /> + <resource-match attr="device-cap" func="equal" match="chord" /> + <resource-match attr="device-cap" func="equal" match="nservice" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="volume.set" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="webapis" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="websetting" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="testautomation" /> + </condition> + </rule> + +<!-- Belows will be removed --> + <!-- access to timeutil --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="time" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="log" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="account.read" /> + <resource-match attr="device-cap" func="equal" match="account.write" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="contentmanager.write" /> + </condition> + </rule> + + <!-- access to external network --> + <!-- XMLHttpRequestTizen and externalNetworkAccessTizen defined for Tizen Webapp --> + <!-- Function of two capabilities are same to XMLHttpRequest and externalNetworkAccess of WAC --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="XMLHttpRequest" /> + <resource-match attr="device-cap" func="equal" match="externalNetworkAccess" /> + </condition> + </rule> + + <!-- access to external network on roaming status --> + <!-- + <rule effect="permit"> + <condition combine="and"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="XMLHttpRequest" /> + <resource-match attr="device-cap" func="equal" match="externalNetworkAccess" /> + </condition> + <environment-match attr="roaming" match="true" /> + </condition> + </rule> + --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="accessoryprotocol" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="irled" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="healthinfo" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="personalinfo" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="connection" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="medicalinfo" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="retail.display" /> + </condition> + </rule> + + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="audio.setting" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="internet" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="location" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="telephony" /> + </condition> + </rule> + + <rule effect="deny" /> + + </policy> + <policy id="Tizen-Policy-Partner-API" description="Partner API" combine="permit-overrides"> + <target> + <!-- partner API --> + </target> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="tizen" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="alarm" /> + </condition> + </rule> + + <!-- access to application --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="application.launch" /> + <resource-match attr="device-cap" func="equal" match="appmanager.kill" /> + <resource-match attr="device-cap" func="equal" match="appmanager.certificate" /> + <resource-match attr="device-cap" func="equal" match="application.info" /> + </condition> + </rule> + + <!-- access to package --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="package.info" /> + </condition> + </rule> + + <!-- access to bluetooth --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="bluetooth.admin" /> + <resource-match attr="device-cap" func="equal" match="bluetooth.gap" /> + <resource-match attr="device-cap" func="equal" match="bluetooth.spp" /> + <resource-match attr="device-cap" func="equal" match="bluetooth.health" /> + </condition> + </rule> + + <!-- access to calendar --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="calendar.read" /> + <resource-match attr="device-cap" func="equal" match="calendar.write" /> + </condition> + </rule> + + <!-- access to call history --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="callhistory.read" /> + <resource-match attr="device-cap" func="equal" match="callhistory.write" /> + </condition> + </rule> + + <!-- access to contact --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="contact.read" /> + <resource-match attr="device-cap" func="equal" match="contact.write" /> + </condition> + </rule> + + <!-- access to content --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="content.read" /> + <resource-match attr="device-cap" func="equal" match="content.write" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="datacontrol.consumer" /> + </condition> + </rule> + + <!-- access to download feature --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="download" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="filesystem.read" /> + <resource-match attr="device-cap" func="equal" match="filesystem.write" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="messaging.read" /> + <resource-match attr="device-cap" func="equal" match="messaging.write" /> + <!-- keep --> + <resource-match attr="device-cap" func="equal" match="messaging.send" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="networkbearerselection" /> + </condition> + </rule> + + <!-- access to NFC --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="nfc.admin" /> + <resource-match attr="device-cap" func="equal" match="nfc.tag" /> + <resource-match attr="device-cap" func="equal" match="nfc.p2p" /> + <resource-match attr="device-cap" func="equal" match="nfc.cardemulation" /> + <resource-match attr="device-cap" func="equal" match="nfc.common" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="notification" /> + </condition> + </rule> + + <!-- access to power feature --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="power" /> + </condition> + </rule> + + <!-- access to datasync --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="datasync" /> + </condition> + </rule> + + <!-- access to push feature --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="push" /> + </condition> + </rule> + + <!-- access to system setting --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="setting" /> + </condition> + </rule> + + <!-- access to systeminfo --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="system.info" /> + <resource-match attr="device-cap" func="equal" match="systemmanager.info" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="systemmanager" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="secureelement" /> + <resource-match attr="device-cap" func="equal" match="se" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="allshare" /> + <resource-match attr="device-cap" func="equal" match="chord" /> + <resource-match attr="device-cap" func="equal" match="nservice" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="volume.set" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="webapis" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="websetting" /> + </condition> + </rule> + +<!-- Belows will be removed --> + <!-- access to timeutil --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="time" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="log" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="account.read" /> + <resource-match attr="device-cap" func="equal" match="account.write" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="contentmanager.write" /> + </condition> + </rule> + + <!-- access to external network --> + <!-- XMLHttpRequestTizen and externalNetworkAccessTizen defined for Tizen Webapp --> + <!-- Function of two capabilities are same to XMLHttpRequest and externalNetworkAccess of WAC --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="XMLHttpRequest" /> + <resource-match attr="device-cap" func="equal" match="externalNetworkAccess" /> + </condition> + </rule> + + <!-- access to external network on roaming status --> + <!-- + <rule effect="permit"> + <condition combine="and"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="XMLHttpRequest" /> + <resource-match attr="device-cap" func="equal" match="externalNetworkAccess" /> + </condition> + <environment-match attr="roaming" match="true" /> + </condition> + </rule> + --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="accessoryprotocol" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="irled" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="healthinfo" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="personalinfo" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="connection" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="medicalinfo" /> + </condition> + </rule> + + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="audio.setting" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="internet" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="location" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="telephony" /> + </condition> + </rule> + + <rule effect="deny" /> + + </policy> + <policy id="Tizen-Policy-Public-API" description="Public API" combine="permit-overrides"> + <target> + <!-- public API --> + </target> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="tizen" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="alarm" /> + </condition> + </rule> + + <!-- access to application --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="application.launch" /> + <resource-match attr="device-cap" func="equal" match="application.info" /> + </condition> + </rule> + + <!-- access to package --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="package.info" /> + </condition> + </rule> + + <!-- access to bluetooth --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="bluetooth.admin" /> + <resource-match attr="device-cap" func="equal" match="bluetooth.gap" /> + <resource-match attr="device-cap" func="equal" match="bluetooth.spp" /> + <resource-match attr="device-cap" func="equal" match="bluetooth.health" /> + </condition> + </rule> + + <!-- access to calendar --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="calendar.read" /> + <resource-match attr="device-cap" func="equal" match="calendar.write" /> + </condition> + </rule> + + <!-- access to call history --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="callhistory.read" /> + <resource-match attr="device-cap" func="equal" match="callhistory.write" /> + </condition> + </rule> + + <!-- access to contact --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="contact.read" /> + <resource-match attr="device-cap" func="equal" match="contact.write" /> + </condition> + </rule> + + <!-- access to content --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="content.read" /> + <resource-match attr="device-cap" func="equal" match="content.write" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="datacontrol.consumer" /> + </condition> + </rule> + + <!-- access to download feature --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="download" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="filesystem.read" /> + <resource-match attr="device-cap" func="equal" match="filesystem.write" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="messaging.read" /> + <resource-match attr="device-cap" func="equal" match="messaging.write" /> + <!-- keep --> + <resource-match attr="device-cap" func="equal" match="messaging.send" /> + </condition> + </rule> + + <!-- access to NFC --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="nfc.admin" /> + <resource-match attr="device-cap" func="equal" match="nfc.tag" /> + <resource-match attr="device-cap" func="equal" match="nfc.p2p" /> + <resource-match attr="device-cap" func="equal" match="nfc.cardemulation" /> + <resource-match attr="device-cap" func="equal" match="nfc.common" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="notification" /> + </condition> + </rule> + + <!-- access to power feature --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="power" /> + </condition> + </rule> + + <!-- access to datasync --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="datasync" /> + </condition> + </rule> + + <!-- access to push feature --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="push" /> + </condition> + </rule> + + <!-- access to system setting --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="setting" /> + </condition> + </rule> + + <!-- access to systeminfo --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="system.info" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="secureelement" /> + <resource-match attr="device-cap" func="equal" match="se" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="allshare" /> + <resource-match attr="device-cap" func="equal" match="chord" /> + <resource-match attr="device-cap" func="equal" match="nservice" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="volume.set" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="webapis" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="websetting" /> + </condition> + </rule> + +<!-- Belows will be removed --> + <!-- access to timeutil --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="time" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="log" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="account.read" /> + <resource-match attr="device-cap" func="equal" match="account.write" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="contentmanager.write" /> + </condition> + </rule> + + <!-- access to external network --> + <!-- XMLHttpRequestTizen and externalNetworkAccessTizen defined for Tizen Webapp --> + <!-- Function of two capabilities are same to XMLHttpRequest and externalNetworkAccess of WAC --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="XMLHttpRequest" /> + <resource-match attr="device-cap" func="equal" match="externalNetworkAccess" /> + </condition> + </rule> + + <!-- access to external network on roaming status --> + <!-- + <rule effect="permit"> + <condition combine="and"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="XMLHttpRequest" /> + <resource-match attr="device-cap" func="equal" match="externalNetworkAccess" /> + </condition> + <environment-match attr="roaming" match="true" /> + </condition> + </rule> + --> + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="accessoryprotocol" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="irled" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="healthinfo" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="audio.setting" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="internet" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="location" /> + </condition> + </rule> + + <rule effect="permit"> + <condition combine="or"> + <resource-match attr="device-cap" func="equal" match="telephony" /> + </condition> + </rule> + + <rule effect="deny" /> + + </policy> + <policy id="Tizen-Policy-Untrusted" description="Tizen's policy for untrusted domain" combine="permit-overrides"> + <!-- Specific Untrusted Policy for Tizen --> + + <rule effect="deny" /> + </policy> +</policy-set> |