Set the SMACK security label to run given executable file in systemd services

Change-Id: I4ed51c4f9a533caf87094b22d917316f83730ccc
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>

diff --git a/units/resize2fs@.service b/units/resize2fs@.service
index 8802a5918097b5921d5bc062fd3750742f439750..6bdd9b68da7d9d48b40ef76ac5d8a2d9d7b1758b 100644 (file)
--- a/units/resize2fs@.service
+++ b/units/resize2fs@.service
@@ -8,6 +8,7 @@ Before=shutdown.target
 
 [Service]
 Type=oneshot
+SmackProcessLabel=System
 ExecStart=/sbin/resize2fs -f %f
 ExecStartPost=/bin/ln -s /dev/null /etc/systemd/system/resize2fs@%i.service
 StandardOutput=journal+console

diff --git a/units/tizen-fstrim-user.service b/units/tizen-fstrim-user.service
index 524086d04e917b3bdf31fb3cf15dce541759eb08..33cea578911114db64544689597fa6671b1f1d40 100644 (file)
--- a/units/tizen-fstrim-user.service
+++ b/units/tizen-fstrim-user.service
@@ -4,6 +4,7 @@ Requires=opt.mount
 
 [Service]
 Type=oneshot
+SmackProcessLabel=System
 ExecStart=/usr/bin/tizen-fstrim-on-charge.sh /opt
 StandardOutput=journal
 StandardError=inherit

diff --git a/units/tizen-system-env.service b/units/tizen-system-env.service
index 3130b8c2fb46097f945dbf8210d11d4ccb46e637..fac769e85c140ea929c70487848fb7ea4ac246ee 100644 (file)
--- a/units/tizen-system-env.service
+++ b/units/tizen-system-env.service
@@ -5,6 +5,7 @@ Before=basic.target
 
 [Service]
 Type=oneshot
+SmackProcessLabel=System
 ExecStart=/usr/bin/env -i sh -c 'source /etc/profile; env | /bin/egrep -v "^(HOME|PWD|SHLVL|_|USER|MAIL|LOGNAME|XDG_RUNTIME_DIR)=" > /run/tizen-system-env'
 ExecStart=/usr/bin/env -i sh -c 'source /etc/profile; env | /bin/egrep -e "XDG_RUNTIME_DIR=" > /run/xdg-root-env'
 

diff --git a/units/umount-opt.service b/units/umount-opt.service
index dcf6c13ad14a094130c26f769acbc6fa49bf1d90..9402151bd03c763c07bb237b397ae82f8030359e 100644 (file)
--- a/units/umount-opt.service
+++ b/units/umount-opt.service
@@ -8,4 +8,5 @@ Requires=local-fs-pre.target
 [Service]
 Type=oneshot
 RemainAfterExit=yes
+SmackProcessLabel=System
 ExecStart=/bin/umount -l /opt