tizen: Set DefaultSmackProcessLabel to User
authorŁukasz Stelmach <l.stelmach@samsung.com>
Tue, 28 Jun 2022 15:15:37 +0000 (17:15 +0200)
committerŁukasz Stelmach <l.stelmach@samsung.com>
Mon, 25 Mar 2024 13:22:47 +0000 (14:22 +0100)
Run user session services with the User SMACK label instead of
System::Privileged inherited from systemd.

Change-Id: Ia3759dea4fb248aa88dcd303a4ae4a400d89f580
Signed-off-by: Łukasz Stelmach <l.stelmach@samsung.com>
src/core/user.conf.in

index 14f0eae..7e9f0f5 100644 (file)
@@ -54,6 +54,6 @@
 #DefaultLimitRTTIME=
 #DefaultMemoryPressureThresholdSec=200ms
 #DefaultMemoryPressureWatch=auto
-#DefaultSmackProcessLabel=
+DefaultSmackProcessLabel=User
 #ReloadLimitIntervalSec=
 #ReloadLimitBurst