Commit 645745b7 authored by Raine Makelainen's avatar Raine Makelainen

[ssu] Protect SSU dbus interface with sailfish-system group. Contributes to JB#47997

File system permissions are kept under ssu and those should be only
accessible by the ssud itself.
parent 27af65c0
......@@ -8,7 +8,7 @@
<allow send_destination="org.nemo.ssu" send_interface="org.nemo.ssu"/>
</policy>
<policy group="system">
<policy group="sailfish-system">
<allow send_destination="org.nemo.ssu" send_interface="org.nemo.ssu"/>
<allow send_destination="org.nemo.ssu" send_interface="org.freedesktop.DBus.Introspectable"/>
<allow send_destination="org.nemo.ssu" send_interface="org.freedesktop.DBus.Peer"/>
......
......@@ -17,6 +17,7 @@ BuildRequires: pkgconfig(libshadowutils)
BuildRequires: pkgconfig(connman-qt5)
BuildRequires: oneshot
BuildRequires: doxygen
Requires(pre): sailfish-setup
Requires(pre): shadow-utils
Requires(pre): /usr/bin/groupadd-user
Requires(postun): shadow-utils
......@@ -188,8 +189,6 @@ cd .. && cp -R doc/html/* %{buildroot}/%{_docdir}/%{name}/
%pre
groupadd -rf ssu
groupadd-user ssu
if [ -f /etc/ssu/ssu.ini ]; then
chgrp ssu /etc/ssu/ssu.ini
chmod 664 /etc/ssu/ssu.ini
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment