Assign capabilities 'cap_dac_override' to service 70/150870/1 accepted/tizen/unified/20170926.061839 submit/tizen/20170925.022002
authorjoon.c.baek <joon.c.baek@samsung.com>
Tue, 19 Sep 2017 03:09:44 +0000 (12:09 +0900)
committerjoon.c.baek <joon.c.baek@samsung.com>
Tue, 19 Sep 2017 03:09:44 +0000 (12:09 +0900)
'cap_dac_override' capabilities used inteaded of
root permission of sys-kernel-tracing.service.

Change-Id: I71870eab4c2a32ac3a904f9713f0cb73a2295126
Signed-off-by: joon.c.baek <joon.c.baek@samsung.com>
packaging/sys-kernel-tracing.service

index 08b4335866611f2eb407669f97728617c86d4707..ebecb7a10409695d7dfa2d0894a45b55ef85c162 100644 (file)
@@ -6,6 +6,10 @@ Before=tmp.mount systemd-tmpfiles-setup.service
 
 [Service]
 SmackProcessLabel=System
+User=system_fw
+Group=system_fw
+SecureBits=keep-caps
+Capabilities=cap_dac_override=i
 Type=oneshot
 RemainAfterExit=yes
 ExecStart=/bin/touch -f /sys/kernel/debug/tracing