[SECSFV-23] Make systemd set wmeshd capabilities
[platform/core/connectivity/wifi-mesh-manager.git] / packaging / wmeshd.service
1 [Unit]
2 Description=Wi-Fi Mesh Network Manager service
3 Requires=dbus.socket
4 After=dbus.socket
5
6 [Service]
7 Type=dbus
8 User=network_fw
9 Group=network_fw
10 BusName=net.wmesh.manager
11 SmackProcessLabel=System
12 ExecStart=/usr/bin/wmeshd
13 CapabilityBoundingSet=~CAP_MAC_ADMIN
14 CapabilityBoundingSet=~CAP_MAC_OVERRIDE
15 Capabilities=cap_net_admin,cap_net_raw=i
16 SecureBits=keep-caps