Enforce separation of users using UMASK
[AGL/meta-agl.git] / meta-app-framework / recipes-core / base-files / base-files_%.bbappend
1 RDEPENDS_${PN}_append_with-lsm-smack = " smack"
2 PACKAGE_WRITE_DEPS_append_with-lsm-smack = " smack-native"
3
4 do_install_append() {
5     install -m 0700 -d ${D}/${sysconfdir}/skel
6     chmod -R 0700 ${D}/${sysconfdir}/skel
7     install -m 0700 -d ${D}/${sysconfdir}/skel/app-data
8     install -m 0700 -d ${D}/${sysconfdir}/skel/.config
9     install -m 0755 -d ${D}/var
10     if [ -d ${D}/usr/local ]; then
11         mv ${D}/usr/local ${D}/var
12     else
13         install -m 0755 -d ${D}/var/local
14     fi
15     ln -s ../var/local ${D}/usr/local
16 }
17
18 do_install_append_with-lsm-smack () {
19     install -d ${D}/${sysconfdir}/smack/accesses.d
20     cat > ${D}/${sysconfdir}/smack/accesses.d/default-access-domains-no-user <<EOF
21 System User::App-Shared rwxat
22 System User::Home       rwxat
23 EOF
24     chmod 0644 ${D}/${sysconfdir}/smack/accesses.d/default-access-domains-no-user
25 }
26
27 pkg_postinst_${PN}_append_with-lsm-smack() {
28     chsmack -r -a 'User::Home' -t -D $D/${sysconfdir}/skel
29     chsmack -a 'User::App-Shared' -D $D/${sysconfdir}/skel/app-data
30     cp -rTf --preserve=all $D/${sysconfdir}/skel $D/${ROOT_HOME}
31 }
32