From f048f1929149d6ae99f532031e09af67f6f49ac7 Mon Sep 17 00:00:00 2001 From: George Kiagiadakis Date: Wed, 26 Jun 2019 16:21:26 +0300 Subject: meta-pipewire: add patch to security-manager for pipewire This grants permission to all applications to be able to communicate with pipewire. This is a temporary measure that we need to rethink in the future. This commit also changes the priority of the meta-pipewire layer because the security-manager patch needs to be applied after the patch to the same file from meta-app-framework, which has priority 70. Bug-AGL: SPEC-2554 Change-Id: I9df47ea1a40e1fa97900bb5dbc21bc11765eb7ab Signed-off-by: George Kiagiadakis --- meta-pipewire/conf/layer.conf | 2 +- ...ck-rules-to-allow-connections-to-pipewire.patch | 25 ++++++++++++++++++++++ .../security-manager/security-manager_%.bbappend | 2 ++ 3 files changed, 28 insertions(+), 1 deletion(-) create mode 100644 meta-pipewire/recipes-security/security-manager/security-manager/0001-Adapt-smack-rules-to-allow-connections-to-pipewire.patch create mode 100644 meta-pipewire/recipes-security/security-manager/security-manager_%.bbappend diff --git a/meta-pipewire/conf/layer.conf b/meta-pipewire/conf/layer.conf index bd56479c..8ad06e3e 100644 --- a/meta-pipewire/conf/layer.conf +++ b/meta-pipewire/conf/layer.conf @@ -7,6 +7,6 @@ BBFILES += "${LAYERDIR}/recipes-*/*/*.bb \ BBFILE_COLLECTIONS += "meta-pipewire" BBFILE_PATTERN_meta-pipewire = "^${LAYERDIR}/" -BBFILE_PRIORITY_meta-pipewire = "8" +BBFILE_PRIORITY_meta-pipewire = "71" LAYERSERIES_COMPAT_meta-pipewire = "thud" diff --git a/meta-pipewire/recipes-security/security-manager/security-manager/0001-Adapt-smack-rules-to-allow-connections-to-pipewire.patch b/meta-pipewire/recipes-security/security-manager/security-manager/0001-Adapt-smack-rules-to-allow-connections-to-pipewire.patch new file mode 100644 index 00000000..821c1e1d --- /dev/null +++ b/meta-pipewire/recipes-security/security-manager/security-manager/0001-Adapt-smack-rules-to-allow-connections-to-pipewire.patch @@ -0,0 +1,25 @@ +From cc5cbaddad6fe559e9e482467266fb18fb00c6a7 Mon Sep 17 00:00:00 2001 +From: George Kiagiadakis +Date: Wed, 26 Jun 2019 16:02:13 +0300 +Subject: [PATCH] Adapt smack rules to allow connections to pipewire + +Signed-off-by: George Kiagiadakis +--- + policy/app-rules-template.smack | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/policy/app-rules-template.smack b/policy/app-rules-template.smack +index 910f40c..78b75de 100644 +--- a/policy/app-rules-template.smack ++++ b/policy/app-rules-template.smack +@@ -4,6 +4,7 @@ System ~PKG~ rwxat + ~APP~ System::Shared rx + ~APP~ System::Run rwxat + ~APP~ System::Log rwxa ++~APP~ System::Pipewire rw + ~APP~ _ l + ~APP~ User::Home rxl + ~APP~ User::App-Shared rwxat +-- +2.20.1 + diff --git a/meta-pipewire/recipes-security/security-manager/security-manager_%.bbappend b/meta-pipewire/recipes-security/security-manager/security-manager_%.bbappend new file mode 100644 index 00000000..319a27d6 --- /dev/null +++ b/meta-pipewire/recipes-security/security-manager/security-manager_%.bbappend @@ -0,0 +1,2 @@ +FILESEXTRAPATHS_prepend := "${THISDIR}/security-manager:" +SRC_URI += "file://0001-Adapt-smack-rules-to-allow-connections-to-pipewire.patch" -- cgit 1.2.3-korg