provided.inc: Fix smack label of sockets

Change-Id: I53d3cac7136e4d169acd8e3e3de5ea8439dd0192
Signed-off-by: José Bollo <jose.bollo@iot.bzh>

diff --git a/conf/unit/afm-unit-debug.conf.in b/conf/unit/afm-unit-debug.conf.in
index ee6b69b..ba42ea4 100644 (file)
--- a/conf/unit/afm-unit-debug.conf.in
+++ b/conf/unit/afm-unit-debug.conf.in
@@ -215,8 +215,8 @@ After=user@%i.service
 DefaultDependencies=no
 [Socket]
 SmackLabel=*
-SmackLabelIPIn=*
-SmackLabelIPOut=*
+SmackLabelIPIn=System
+SmackLabelIPOut=System
 ListenStream=@afm_users_rundir@/%i/apis/ws/{{name}}
 FileDescriptorName={{name}}
 Service=afm-{{#required-permission.urn:AGL:permission::public:hidden}}service{{/required-permission.urn:AGL:permission::public:hidden}}{{^required-permission.urn:AGL:permission::public:hidden}}appli{{/required-permission.urn:AGL:permission::public:hidden}}-{{:id}}--{{:ver}}--{{:#target}}@%i.service

diff --git a/conf/unit/afm-unit.conf.in b/conf/unit/afm-unit.conf.in
index 9fa3794..f9bf8bc 100644 (file)
--- a/conf/unit/afm-unit.conf.in
+++ b/conf/unit/afm-unit.conf.in
@@ -215,8 +215,8 @@ After=user@%i.service
 DefaultDependencies=no
 [Socket]
 SmackLabel=*
-SmackLabelIPIn=*
-SmackLabelIPOut=*
+SmackLabelIPIn=System
+SmackLabelIPOut=System
 ListenStream=@afm_users_rundir@/%i/apis/ws/{{name}}
 FileDescriptorName={{name}}
 Service=afm-{{#required-permission.urn:AGL:permission::public:hidden}}service{{/required-permission.urn:AGL:permission::public:hidden}}{{^required-permission.urn:AGL:permission::public:hidden}}appli{{/required-permission.urn:AGL:permission::public:hidden}}-{{:id}}--{{:ver}}--{{:#target}}@%i.service

diff --git a/conf/unit/generate-unit-conf/provided.inc b/conf/unit/generate-unit-conf/provided.inc
index 37ed8c4..5a43ed7 100644 (file)
--- a/conf/unit/generate-unit-conf/provided.inc
+++ b/conf/unit/generate-unit-conf/provided.inc
@@ -19,8 +19,8 @@ DefaultDependencies=no
 
 [Socket]
 SmackLabel=*
-SmackLabelIPIn=*
-SmackLabelIPOut=*
+SmackLabelIPIn=System
+SmackLabelIPOut=System
 ListenStream=USER_RUN_DIR/apis/ws/{{name}}
 FileDescriptorName={{name}}