Add Capabilities into service as per the security guideline change

[platform/core/telephony/telephony-daemon.git] / packaging / telephony-daemon.service

diff --git a/packaging/telephony-daemon.service b/packaging/telephony-daemon.service
index dc4128b..6f4098f 100644 (file)
--- a/packaging/telephony-daemon.service
+++ b/packaging/telephony-daemon.service
@@ -7,9 +7,11 @@ User=telephony
 Group=telephony
 SmackProcessLabel=System
 ExecStart=/usr/bin/telephony-daemon
-Restart=always
+Restart=on-failure
 RestartSec=0
 KillMode=none
+Capabilities=cap_net_admin=i
+SecureBits=keep-caps
 
 [Install]
 WantedBy=multi-user.target