Hello Team,

As per our  use-case, we need to develop 2 AGL services which needs to access files between them.

1st service writes and stores data in a file. The 2nd service should access this file and perform some operation.

Issue - 2nd service is not able to access the file stored by 1st service.

Error thrown -

fopen in 2nd service throws 'Permission denied' error.

journalctl -f command output -

ERROR: [API securityOperations] Unable to open revoke list file13-Permission denied
Oct 13 11:46:23 qemux86-64 afbd-securityservice[1257]: [/home/AGL/agl-app/newservice/service/security_module.c:691,test]
Oct 13 11:46:23 qemux86-64 audit[1257]: AVC lsm=SMACK fn=smack_inode_permission action=denied subject="User::App::service1" object="User::App::service2" requested=r pid=1257 comm="afbd-securityse" name="List.txt" dev="sda2" ino=260899

'service1' and 'service2' are the two services and 'List.txt' is the filename created by service1. It needs to be accessed by service2.

Query: Can such file access be done between two services. If yes, at which path should the file be stored so that it can be accessed by other service.

Currently the file is stored in /var/scope-platform/service1/ path.