diff options
| author | SangYoun Kwak <sy.kwak@samsung.com> | 2024-06-25 13:56:46 +0900 |
|---|---|---|
| committer | Chanwoo Choi <cw00.choi@samsung.com> | 2024-06-25 05:16:27 +0000 |
| commit | a7807c90b8e82373bf74272f895dfef79a52c483 (patch) | |
| tree | 72e201f818f62a0b47c049c7be4c95b10d1d4e82 | |
| parent | b508156c6cc11b189e3f7e37baee71767df89751 (diff) | |
| download | deviced-tizen.tar.gz deviced-tizen.tar.bz2 deviced-tizen.zip | |
Add smack privilege as 'System::Tools' to device_board_* toolstizen
To set privilege and prohibit accesses to the device_board_* commands,
smack label 'System::Tools' is added.
Change-Id: I41a20162372a46fa238e2091053db972cdb01364
Signed-off-by: SangYoun Kwak <sy.kwak@samsung.com>
| -rw-r--r-- | packaging/deviced.spec | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/packaging/deviced.spec b/packaging/deviced.spec index 830d875e..47200364 100644 --- a/packaging/deviced.spec +++ b/packaging/deviced.spec @@ -237,6 +237,22 @@ update-alternatives --remove shutdown %{_sbindir}/deviced-power-command || : %postun -n libdeviced -p /sbin/ldconfig +%post tools +chsmack -a 'System::Tools' %{_bindir}/device_board_set_boot_success +chsmack -a 'System::Tools' %{_bindir}/device_board_clear_boot_mode +chsmack -a 'System::Tools' %{_bindir}/device_board_get_boot_mode +chsmack -a 'System::Tools' %{_bindir}/device_board_get_current_partition +chsmack -a 'System::Tools' %{_bindir}/device_board_switch_partition +chsmack -a 'System::Tools' %{_bindir}/device_board_set_partition_ab_cloned +chsmack -a 'System::Tools' %{_bindir}/device_board_clear_partition_ab_cloned +chsmack -a 'System::Tools' %{_bindir}/device_board_get_partition_ab_cloned +chsmack -a 'System::Tools' %{_bindir}/device_board_set_partition_status +chsmack -a 'System::Tools' %{_bindir}/device_board_get_partition_status +chsmack -a 'System::Tools' %{_bindir}/device_board_set_upgrade_progress_status +chsmack -a 'System::Tools' %{_bindir}/device_board_get_upgrade_progress_status +chsmack -a 'System::Tools' %{_bindir}/device_board_set_upgrade_state +chsmack -a 'System::Tools' %{_bindir}/device_board_get_upgrade_state + %post plugin-profile-mobile mv %{_sysconfdir}/deviced/display-profile-mobile.conf %{_sysconfdir}/deviced/display.conf mv %{_sysconfdir}/deviced/power-profile-mobile.conf %{_sysconfdir}/deviced/power.conf |