Set User:Group for edutm services as network_fw:network_fw
[platform/core/connectivity/bluetooth-tools.git] / packaging / bluetooth-edutm-off.service
index 4458e79..8159b3e 100644 (file)
@@ -2,9 +2,13 @@
 Description=Bluetooth EDUTM off
 
 [Service]
-User=root
-Group=root
+User=network_fw
+Group=network_fw
 Type=oneshot
+SmackProcessLabel=System
+
+SecureBits=keep-caps
+Capabilities=cap_net_admin,cap_net_raw=i
 
 ExecStart=/usr/etc/bluetooth/bt-edutm-off.sh
 ExecStartPost=/usr/bin/systemctl stop bluetooth-edutm-on