Remove samck capability

Need to remove smack capability from root daemon.

Change-Id: I7586b84a8d43fb72f91f12fa9e6345c7fb483273
Signed-off-by: Yunmi Ha <yunmi.ha@samsung.com>

diff --git a/data/tlm.service b/data/tlm.service
index 2a08f59..3cd0ed5 100644 (file)
--- a/data/tlm.service
+++ b/data/tlm.service
@@ -5,6 +5,8 @@ Requires=dbus.socket
 
 [Service]
 ExecStart=/usr/bin/tlm
+CapabilityBoundingSet=~CAP_MAC_ADMIN
+CapabilityBoundingSet=~CAP_MAC_OVERRIDE
 #StandardInput=tty
 #StandardOutput=journal
 #StandardError=journal