Add capabilities to pkg_recovery & unified-backend

- cap_chown, cap_dac_override and cap_fowner are added.

Change-Id: I196e985101b4b24ec59f12b4541dff4be0511645

diff --git a/config/set_capability b/config/set_capability
index 2d7bf7a0bf7d7e11cd06f85877ea539789857c89..2fe9cace50f2ed1ff524ccdc27a5353f7d5df4cc 100755 (executable)
--- a/config/set_capability
+++ b/config/set_capability
@@ -856,6 +856,29 @@ if [ -e "/usr/bin/nan-manager" ]
 then /usr/sbin/setcap cap_net_admin,cap_net_raw=ei /usr/bin/nan-manager
 fi
 
+# Package               platform/core/appfw/unified-backend
+# Date                  Jul 15, 2020
+# Required             cap_dac_override, cap_chown, cap_fowner
+# cap_dac_override     access to /home/$USER/apps_rw
+# cap_chown            use chown API
+# cap_fowner           use chmod API
+
+if [ -e "/usr/bin/unified-backend" ]
+then /usr/sbin/setcap cap_dac_override,cap_chown,cap_fowner=ei /usr/bin/unified-backend
+fi
+
+# Package              app-installers
+# Date                  Jul 15, 2020
+# Required             cap_dac_override, cap_chown, cap_fowner
+# cap_dac_override     To restore user data
+# cap_chown            use chown API
+# cap_fowner           use chmod API
+
+if [ -e "/usr/bin/pkg_recovery" ]
+then /usr/sbin/setcap cap_dac_override,cap_chown,cap_fowner=ei /usr/bin/pkg_recovery
+fi
+
+
 # TODO: MOVE TO OTHER SCRIPT OR REMOVE
 # Requested by sooyeon.kim@samsung.com (.voice) and dalton.lee@samsung.com (.multiassistant)
 dir_list=(".voice" ".multiassistant")

diff --git a/test/capability_test/new_capabilities_exception.list b/test/capability_test/new_capabilities_exception.list
index 6caef3a328f359c8dd314e3b44f1c24e872e90eb..7057e3028e4f4751437a76dede1a0401fd4c944e 100755 (executable)
--- a/test/capability_test/new_capabilities_exception.list
+++ b/test/capability_test/new_capabilities_exception.list
@@ -17,7 +17,8 @@
 /usr/bin/muse-server = cap_dac_override+ei
 /usr/bin/amd = cap_dac_override,cap_kill,cap_setgid,cap_setuid,cap_sys_admin,cap_mac_admin+ei
 /usr/bin/amd = cap_dac_override,cap_kill,cap_sys_admin+ei
-/usr/bin/wrt-loader = cap_setgid,cap_sys_admin+ei/usr/bin/tpk-backend = cap_chown,cap_dac_override,cap_fowner+ei
+/usr/bin/wrt-loader = cap_setgid,cap_sys_admin+ei
+/usr/bin/tpk-backend = cap_chown,cap_dac_override,cap_fowner+ei
 /usr/bin/launchpad-loader = cap_setgid,cap_sys_admin,cap_sys_nice+ei
 /usr/bin/app-defined-loader = cap_setgid,cap_sys_admin,cap_sys_nice+ei
 /usr/bin/email-service = cap_chown+eip
@@ -84,3 +85,5 @@
 /usr/bin/nan-manager = cap_net_admin,cap_net_raw+ei
 /usr/sbin/stability-monitor = cap_kill,cap_sys_module,cap_sys_ptrace+ei
 /usr/libexec/bluetooth/bluetooth-meshd = cap_dac_override,cap_net_bind_service,cap_net_admin+ei
+/usr/bin/unified-backend = cap_chown,cap_dac_override,cap_fowner+ei
+/usr/bin/pkg_recovery = cap_chown,cap_dac_override,cap_fowner+ei