aboutsummaryrefslogtreecommitdiffstats
path: root/src/wgtpkg-install.c
diff options
context:
space:
mode:
authorJosé Bollo <jose.bollo@iot.bzh>2020-07-10 13:18:47 +0200
committerJosé Bollo <jose.bollo@iot.bzh>2020-07-10 13:34:01 +0200
commit5b9231c2c8266317081d98f38041105a0ef87e84 (patch)
treefc9189c89fb9709e19f70657a398d5bc18dc0a4e /src/wgtpkg-install.c
parent7084f123b4f8a704ae2bc35b5fe9433f767439fe (diff)
Before that change any application could browse content of other application. This change fixes that unintended behaviour by setting the installed files as private to the application. This affects the Smack labels of the files that after the change become the label of the application. Bug-AGL: SPEC-3489 Change-Id: I933446a8c155a03d9b66767f1dda63aeaeb21eb1 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
Diffstat (limited to 'src/wgtpkg-install.c')
-rw-r--r--src/wgtpkg-install.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/wgtpkg-install.c b/src/wgtpkg-install.c
index 57c17b8..14d3b85 100644
--- a/src/wgtpkg-install.c
+++ b/src/wgtpkg-install.c
@@ -524,7 +524,7 @@ static int install_security(const struct wgt_desc *desc)
if (lf <= lic && icon && !memcmp(f->name, icon, lf) && (!f->name[lf] || f->name[lf] == '/'))
rc = secmgr_path_public_read_only(path);
else
- rc = secmgr_path_read_only(path);
+ rc = secmgr_path_private(path);
if (rc)
goto error2;
}