unit.conf: Fix Smack permission on api ws

The Smack permission to write on the websocket of the API
must be set to something that allows the communication!

Here the chosen value is *

Change-Id: Ia276219b232e33bd35353d8feb333513b340e75c
Signed-off-by: José Bollo <jose.bollo@iot.bzh>

diff --git a/conf/unit/afm-unit-debug.conf.in b/conf/unit/afm-unit-debug.conf.in
index ab1ec79..fbf530a 100644 (file)
--- a/conf/unit/afm-unit-debug.conf.in
+++ b/conf/unit/afm-unit-debug.conf.in
@@ -215,6 +215,8 @@ After=user@%i.service
 DefaultDependencies=no
 [Socket]
 SmackLabel=*
+SmackLabelIPIn=*
+SmackLabelIPOut=*
 ListenStream=/run/user/%i/apis/ws/{{name}}
 FileDescriptorName={{name}}
 Service=afm-{{#required-permission.urn:AGL:permission::public:hidden}}service{{/required-permission.urn:AGL:permission::public:hidden}}{{^required-permission.urn:AGL:permission::public:hidden}}appli{{/required-permission.urn:AGL:permission::public:hidden}}-{{:id}}--{{:ver}}--{{:#target}}@%i.service

diff --git a/conf/unit/afm-unit.conf.in b/conf/unit/afm-unit.conf.in
index ad5ecd7..1824358 100644 (file)
--- a/conf/unit/afm-unit.conf.in
+++ b/conf/unit/afm-unit.conf.in
@@ -215,6 +215,8 @@ After=user@%i.service
 DefaultDependencies=no
 [Socket]
 SmackLabel=*
+SmackLabelIPIn=*
+SmackLabelIPOut=*
 ListenStream=/run/user/%i/apis/ws/{{name}}
 FileDescriptorName={{name}}
 Service=afm-{{#required-permission.urn:AGL:permission::public:hidden}}service{{/required-permission.urn:AGL:permission::public:hidden}}{{^required-permission.urn:AGL:permission::public:hidden}}appli{{/required-permission.urn:AGL:permission::public:hidden}}-{{:id}}--{{:ver}}--{{:#target}}@%i.service

diff --git a/conf/unit/generate-unit-conf/provided.inc b/conf/unit/generate-unit-conf/provided.inc
index 96ac72c..37ed8c4 100644 (file)
--- a/conf/unit/generate-unit-conf/provided.inc
+++ b/conf/unit/generate-unit-conf/provided.inc
@@ -19,6 +19,8 @@ DefaultDependencies=no
 
 [Socket]
 SmackLabel=*
+SmackLabelIPIn=*
+SmackLabelIPOut=*
 ListenStream=USER_RUN_DIR/apis/ws/{{name}}
 FileDescriptorName={{name}}