Change a user/group from root to security_fw for root minimization

Change-Id: Iaf52426877f065f4e2f80510fbd5163572b1750c
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>

diff --git a/systemd/auth-fw-passwd-check.socket.in b/systemd/auth-fw-passwd-check.socket.in
index 050543ae7176a029899b04efc99f6a3e27f90248..a0702fccd2906776831f27460c35a70b9aa5945e 100644 (file)
--- a/systemd/auth-fw-passwd-check.socket.in
+++ b/systemd/auth-fw-passwd-check.socket.in
@@ -1,5 +1,7 @@
 [Socket]
 ListenStream=@RUN_DIR@/.@SOCK_PASSWD_CHECK@
+SocketUser=security_fw
+SocketGroup=security_fw
 SocketMode=0777
 SmackLabelIPIn=*
 SmackLabelIPOut=@

diff --git a/systemd/auth-fw-passwd-policy.socket.in b/systemd/auth-fw-passwd-policy.socket.in
index 09ed69d923b79d650cc0554d61f306ae7c64f98d..aa179ffcf99e34eb663b77b6ae99905aec40e127 100644 (file)
--- a/systemd/auth-fw-passwd-policy.socket.in
+++ b/systemd/auth-fw-passwd-policy.socket.in
@@ -1,5 +1,7 @@
 [Socket]
 ListenStream=@RUN_DIR@/.@SOCK_PASSWD_POLICY@
+SocketUser=security_fw
+SocketGroup=security_fw
 SocketMode=0777
 SmackLabelIPIn=*
 SmackLabelIPOut=@

diff --git a/systemd/auth-fw-passwd-reset.socket.in b/systemd/auth-fw-passwd-reset.socket.in
index 04f6b04d8d82f204363a64ca53bbcecb3f01d6f5..e486a285232c0cab7426a4dee972ff4643836619 100644 (file)
--- a/systemd/auth-fw-passwd-reset.socket.in
+++ b/systemd/auth-fw-passwd-reset.socket.in
@@ -1,5 +1,7 @@
 [Socket]
 ListenStream=@RUN_DIR@/.@SOCK_PASSWD_RESET@
+SocketUser=security_fw
+SocketGroup=security_fw
 SocketMode=0777
 SmackLabelIPIn=*
 SmackLabelIPOut=@

diff --git a/systemd/auth-fw-passwd-set.socket.in b/systemd/auth-fw-passwd-set.socket.in
index c27f10c990087dc03c699f8166263e0bab438930..ed28dd109233ccff11f88dda7ca3fd04d59e991e 100644 (file)
--- a/systemd/auth-fw-passwd-set.socket.in
+++ b/systemd/auth-fw-passwd-set.socket.in
@@ -1,5 +1,7 @@
 [Socket]
 ListenStream=@RUN_DIR@/.@SOCK_PASSWD_SET@
+SocketUser=security_fw
+SocketGroup=security_fw
 SocketMode=0777
 SmackLabelIPIn=*
 SmackLabelIPOut=@

diff --git a/systemd/auth-fw.service.in b/systemd/auth-fw.service.in
index 4e3a8c96da3391f07ef0bfaa81a12e4be2f35805..540aaed231e2c5437a6ff6fce789dcd4cda49fea 100644 (file)
--- a/systemd/auth-fw.service.in
+++ b/systemd/auth-fw.service.in
@@ -4,6 +4,8 @@ Description=Start @SERVICE_NAME@ server
 [Service]
 Type=notify
 ExecStart=@BIN_DIR@/@SERVICE_NAME@
+User=security_fw
+Group=security_fw
 Sockets=@SOCK_PASSWD_CHECK@
 Sockets=@SOCK_PASSWD_SET@
 Sockets=@SOCK_PASSWD_RESET@