From 1ac5c704bb4b7fd72d9e382ccf23f4d186da0f86 Mon Sep 17 00:00:00 2001
From: Stephane Desneux <stephane.desneux@iot.bzh>
Date: Thu, 23 Jun 2016 16:00:59 +0000
Subject: add layer meta-app-framework

meta-app-framework is a layer containing the AGL App Framework recipes

4 new layers are added for application framework:
    * meta-intel-iot-security/meta-security-smack
    * meta-intel-iot-security/meta-security-framework
    * meta-agl/meta-agl-security
    * meta-agl/meta-app-framework

Configuration file changes to support AppFw:
    * activation of Smack and Cynara
    * modify the tar command to be used to support Smack extended attributes

Change-Id: Idc8abdc8869787feb4b534ee45bf7b5d3dde3632
Signed-off-by: Stephane Desneux <stephane.desneux@iot.bzh>
---
 .../recipes-config/agl-users/agl-users_0.1.bb      | 65 ++++++++++++++++++++++
 1 file changed, 65 insertions(+)
 create mode 100644 meta-app-framework/recipes-config/agl-users/agl-users_0.1.bb

(limited to 'meta-app-framework/recipes-config/agl-users/agl-users_0.1.bb')

diff --git a/meta-app-framework/recipes-config/agl-users/agl-users_0.1.bb b/meta-app-framework/recipes-config/agl-users/agl-users_0.1.bb
new file mode 100644
index 000000000..0f61248db
--- /dev/null
+++ b/meta-app-framework/recipes-config/agl-users/agl-users_0.1.bb
@@ -0,0 +1,65 @@
+inherit allarch useradd
+
+SUMMARY = "AGL Users Seed"
+DESCRIPTION = "This is a core framework component that\
+ defines how users are managed and who are the default users."
+
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = "file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420"
+
+
+SRC_URI = ""
+
+
+RDEPENDS_${PN}_append_smack = " smack-userspace"
+DEPENDS_append_smack = " smack-userspace-native"
+
+ALLOW_EMPTY_${PN} = "1"
+
+USERADD_PACKAGES = "${PN}"
+
+USERADD_PARAM_${PN} = "\
+  -g users -d /home/agl-driver -m -K PASS_MAX_DAYS=-1 agl-driver ; \
+  -g users -d /home/agl-passenger -m -K PASS_MAX_DAYS=-1 agl-passenger \
+"
+
+
+do_configure() {
+    :
+}
+
+do_compile() {
+    :
+}
+
+do_install() {
+    :
+}
+
+
+pkg_postinst_${PN}() {
+    #!/bin/sh -e
+
+    # avoid to run on host
+    [ x"$D" != "x" ] && exit 1
+
+    # Drops password
+    passwd -d agl-driver
+    passwd -d agl-passenger
+}
+           
+pkg_postinst_${PN}_smack() {
+    #!/bin/sh -e
+
+    # avoid to run on host
+    [ x"$D" != "x" ] && exit 1
+
+    # Actions to carry out on the device go here
+    for x in /etc/skel /home/*
+    do
+        chsmack -a User::Home $x
+    done
+    passwd -d agl-driver
+    passwd -d agl-passenger
+}
+           
-- 
cgit 1.2.3-korg


From e94977765987776d7959258cec4b66c809a7b1e8 Mon Sep 17 00:00:00 2001
From: José Bollo <jose.bollo@iot.bzh>
Date: Wed, 8 Mar 2017 14:19:42 +0100
Subject: base-files for the framework
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This setting is introduced primarily to allow the
recipe agl-users to run in a correct environment.

Change-Id: Ib0bd7c8e6520bd87dbb26d9c011f5cb4672f44c7
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
Signed-off-by: Stephane Desneux <stephane.desneux@iot.bzh>
---
 .../recipes-config/agl-users/agl-users_0.1.bb      | 44 ----------------------
 .../recipes-core/af-main/af-main_1.0.bb            | 12 ------
 .../recipes-core/base-files/base-files_%.bbappend  | 22 +++++++++++
 3 files changed, 22 insertions(+), 56 deletions(-)
 create mode 100644 meta-app-framework/recipes-core/base-files/base-files_%.bbappend

(limited to 'meta-app-framework/recipes-config/agl-users/agl-users_0.1.bb')

diff --git a/meta-app-framework/recipes-config/agl-users/agl-users_0.1.bb b/meta-app-framework/recipes-config/agl-users/agl-users_0.1.bb
index 0f61248db..832c51c99 100644
--- a/meta-app-framework/recipes-config/agl-users/agl-users_0.1.bb
+++ b/meta-app-framework/recipes-config/agl-users/agl-users_0.1.bb
@@ -10,10 +10,6 @@ LIC_FILES_CHKSUM = "file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384
 
 SRC_URI = ""
 
-
-RDEPENDS_${PN}_append_smack = " smack-userspace"
-DEPENDS_append_smack = " smack-userspace-native"
-
 ALLOW_EMPTY_${PN} = "1"
 
 USERADD_PACKAGES = "${PN}"
@@ -23,43 +19,3 @@ USERADD_PARAM_${PN} = "\
   -g users -d /home/agl-passenger -m -K PASS_MAX_DAYS=-1 agl-passenger \
 "
 
-
-do_configure() {
-    :
-}
-
-do_compile() {
-    :
-}
-
-do_install() {
-    :
-}
-
-
-pkg_postinst_${PN}() {
-    #!/bin/sh -e
-
-    # avoid to run on host
-    [ x"$D" != "x" ] && exit 1
-
-    # Drops password
-    passwd -d agl-driver
-    passwd -d agl-passenger
-}
-           
-pkg_postinst_${PN}_smack() {
-    #!/bin/sh -e
-
-    # avoid to run on host
-    [ x"$D" != "x" ] && exit 1
-
-    # Actions to carry out on the device go here
-    for x in /etc/skel /home/*
-    do
-        chsmack -a User::Home $x
-    done
-    passwd -d agl-driver
-    passwd -d agl-passenger
-}
-           
diff --git a/meta-app-framework/recipes-core/af-main/af-main_1.0.bb b/meta-app-framework/recipes-core/af-main/af-main_1.0.bb
index e229cd22f..86b5d34e2 100644
--- a/meta-app-framework/recipes-core/af-main/af-main_1.0.bb
+++ b/meta-app-framework/recipes-core/af-main/af-main_1.0.bb
@@ -86,18 +86,6 @@ do_install_append_qemux86-64() {
     sed -i -e '/LD_PRELOAD=\/usr\/lib\/libEGL.so/d' ${D}${systemd_user_unitdir}/afm-user-daemon.service
 }
 
-do_install_append_smack () {
-    install -d ${D}/${sysconfdir}/smack/accesses.d
-    cat > ${D}/${sysconfdir}/smack/accesses.d/default-access-domains-no-user <<EOF
-System User::App-Shared rwxat
-System User::Home       rwxat
-EOF
-    chmod 0644 ${D}/${sysconfdir}/smack/accesses.d/default-access-domains-no-user
-    install -d ${D}/${sysconfdir}/skel/app-data
-    chsmack -a 'User::Home' -t -D ${D}/${sysconfdir}/skel
-    chsmack -a 'User::App-Shared' -D ${D}/${sysconfdir}/skel/app-data
-}
-
 pkg_postinst_${PN}() {
     mkdir -p $D${afm_init_datadir}/applications $D${afm_init_datadir}/icons
     setcap cap_mac_override,cap_dac_override=ep $D${bindir}/afm-system-daemon
diff --git a/meta-app-framework/recipes-core/base-files/base-files_%.bbappend b/meta-app-framework/recipes-core/base-files/base-files_%.bbappend
new file mode 100644
index 000000000..7e12bc829
--- /dev/null
+++ b/meta-app-framework/recipes-core/base-files/base-files_%.bbappend
@@ -0,0 +1,22 @@
+DEPENDS_append_smack = " smack-userspace-native"
+RDEPENDS_${PN}_append_smack = " smack-userspace"
+
+do_install_append() {
+    install -d ${D}/${sysconfdir}/skel/app-data
+    install -d ${D}/${sysconfdir}/skel/.config
+}
+
+do_install_append_smack () {
+    install -d ${D}/${sysconfdir}/smack/accesses.d
+    cat > ${D}/${sysconfdir}/smack/accesses.d/default-access-domains-no-user <<EOF
+System User::App-Shared rwxat
+System User::Home       rwxat
+EOF
+    chmod 0644 ${D}/${sysconfdir}/smack/accesses.d/default-access-domains-no-user
+}
+
+pkg_postinst_${PN}_append_smack() {
+    chsmack -r -a 'User::Home' -t -D $D/${sysconfdir}/skel
+    chsmack -a 'User::App-Shared' -D $D/${sysconfdir}/skel/app-data
+}
+
-- 
cgit 1.2.3-korg