Give cap_mac_admin to wrt-service

- "eip" option is applied, but restricted to use by only chromium-efl app.

Change-Id: I025a3c34c84179d4986c25216288a088c555c4bf

diff --git a/config/set_capability b/config/set_capability
index 2780e02dd665f45b007ae314853fb0669d865cd9..4026edfd1c220786095f4637271fd18e3926821d 100755 (executable)
--- a/config/set_capability
+++ b/config/set_capability
@@ -884,6 +884,18 @@ if [ -e "/usr/sbin/img-verifier" ]
 then /usr/sbin/setcap cap_dac_override=ei /usr/sbin/img-verifier
 fi
 
+# Package              platform/framework/web/chromium-efl
+# Date                  Jan 15, 2021
+# Required             /usr/bin/wrt-service : cap_mac_admin : eip
+# cap_mac_admin                To change a process label
+# It is excuted by a specific application not by systemd service.
+# Therefore, "eip" is required but restricted to access it by SMACK label.
+
+if [ -e "/usr/bin/wrt-service" ]
+then /usr/sbin/setcap cap_mac_admin=eip /usr/bin/wrt-service
+fi
+
+
 # TODO: MOVE TO OTHER SCRIPT OR REMOVE
 # Requested by sooyeon.kim@samsung.com (.voice) and dalton.lee@samsung.com (.multiassistant)
 dir_list=(".voice" ".multiassistant")