Set the SMACK security label to run given executable file in systemd services
[platform/adaptation/bluetooth-firmware-bcm.git] / packaging / bluetooth-hciattach@.service
index 00ec9e9..9d49d09 100644 (file)
@@ -5,6 +5,7 @@ After=bluetooth-hci-device.service
 
 [Service]
 Type=oneshot
+SmackProcessLabel=System
 ExecStartPre=-/bin/mkdir -p /run/bluetooth/
 ExecStart=/bin/touch /run/bluetooth/%I
 ExecStop=/bin/rm /run/bluetooth/%I