service: Move common options to sdbd.service

 - Security options
 - Ensure tmp is mounted for PIDFile=/tmp/... to work

Change-Id: I40deac3492674ae70d249292d7ae3af95aad72f0

diff --git a/packaging/sdbd.service b/packaging/sdbd.service
index eb49efe..3ec4efc 100644 (file)
--- a/packaging/sdbd.service
+++ b/packaging/sdbd.service
@@ -1,10 +1,16 @@
 [Unit]
 Description=sdbd
+After=tmp.mount
 
 [Service]
+User=sdk
+Group=sdk
+SmackProcessLabel=System
 #If necessary, Put Environment variable settings in a file like below
 #ExecStartPre=/bin/bash -c "/bin/echo 'SDB_TRACE=all SDBD_LOG_PATH=/tmp' >> /tmp/.sdbdlog.conf"
 Type=simple
+Capabilities=cap_dac_override,cap_setgid,cap_setuid,cap_sys_admin=i
+SecureBits=keep-caps
 PIDFile=/tmp/.sdbd.pid
 RemainAfterExit=yes
 ExecStart=/usr/sbin/sdbd