Set the SMACK security label to run given executable file in systemd services

Change-Id: I0d8b7952fe5ab56d336addd047136337a4f50be0
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>

diff --git a/packaging/accounts-service.service b/packaging/accounts-service.service
index d537c5d..81ea4a9 100644 (file)
--- a/packaging/accounts-service.service
+++ b/packaging/accounts-service.service
@@ -11,6 +11,7 @@ CapabilityBoundSet=~CAP_MAC_ADMIN
 CapabilityBoundSet=~CAP_MAC_OVERRIDE
 User=service_fw
 Group=service_fw
+SmackProcessLabel=System
 
 [Install]
 WantedBy=multi-user.target