diff options
| author | Karol Lewandowski <k.lewandowsk@samsung.com> | 2018-09-27 11:52:56 +0200 |
|---|---|---|
| committer | Karol Lewandowski <k.lewandowsk@samsung.com> | 2018-09-27 12:05:05 +0200 |
| commit | c9c513b3f5a4940f01dee6697dadfdb4de7d713a (patch) | |
| tree | e3e2cb635044c07f0a1d93687d54e0bd46deba85 | |
| parent | 3f73b0c43e78094a4265b6c3bc209e6c84a1c364 (diff) | |
| download | default-ac-domains-accepted/tizen_5.0_unified.tar.gz default-ac-domains-accepted/tizen_5.0_unified.tar.bz2 default-ac-domains-accepted/tizen_5.0_unified.zip | |
Allow User::Shell subject to create System::Shared files (via Smack transmute)submit/tizen_5.0/20181101.000004submit/tizen/20181002.000233accepted/tizen/unified/20181002.093407accepted/tizen/5.0/unified/20181102.022057tizen_5.0accepted/tizen_5.0_unified
This change is required to support system wide dynamic filtering in DLog
(logger), as described below:
1. filtering is handled in the client - every client needs to access
filters
2. filters are changed dynamically by administrator - root shell via
a. serial console (with System::Privileged label)
b. sdb (with User::Shell label)
3. filters are stored in /run/dlog/filters.d/FILTERS file,
/run/dlog/filters.d has Smack::Shared & Smack transmute set
This commit ensures that case 2b is handled correctly (2a is handled
alredy). Without this change filters would have User::Shell label,
causing applications to not be able to access these files at all -
effectively disabling runtime filtering ability.
Change-Id: I3f15ae8e9822f3396bfbaf20cab005e15b346f83
Signed-off-by: Karol Lewandowski <k.lewandowsk@samsung.com>
| -rw-r--r-- | packaging/default-ac-domains.manifest | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/packaging/default-ac-domains.manifest b/packaging/default-ac-domains.manifest index f67025d..949ff35 100644 --- a/packaging/default-ac-domains.manifest +++ b/packaging/default-ac-domains.manifest @@ -94,7 +94,7 @@ <domain name="User::Shell" policy="shared"/> <request> <smack request="System" type="wx"/> - <smack request="System::Shared" type="rxl"/> + <smack request="System::Shared" type="rxtl"/> <smack request="System::Run" type="rxl"/> <smack request="System::Log" type="w"/> <smack request="User" type="wx"/> |