Add display-manager-monitor.service in the list.

- "/usr/bin/cat" should has "cap_sys_ptrace" to read "/proc/[pid]/stack".
- Working with UID & GID as "graphic_fw" and SMACK label as "System."

Change-Id: I0142d8196ac9808351c3bf89ef06f6463f0c1012

diff --git a/config/set_capability b/config/set_capability
index cf3dd3285416a0e82b8ec73dcd48c77e549b78d7..52bb1dc88cbb5863b8dc607b41d18ab562d64e85 100755 (executable)
--- a/config/set_capability
+++ b/config/set_capability
@@ -628,6 +628,16 @@ if [ -e "/usr/bin/session-bind" ]
 then /usr/sbin/setcap cap_sys_admin=ei /usr/bin/session-bind
 fi
 
+# Package               product/upstream/coreutils
+# Date                  Sep 10, 2018
+# Required              cap_sys_ptrace
+# cap_sys_ptrace       To read /proc/[pid]/stack
+# This is requested Display module, to be used in display-manager-monitor service.
+
+if [ -e "/usr/bin/cat" ]
+then /usr/sbin/setcap cap_sys_ptrace=ei /usr/bin/cat
+fi
+
 # TODO: MOVE TO OTHER SCRIPT OR REMOVE
 # Requested by sooyeon.kim@samsung.com
 if [ -e "/etc/skel/share/.voice" ]

diff --git a/test/capability_test/new_capabilities_exception.list b/test/capability_test/new_capabilities_exception.list
index b6688c8b48a23fbb4a1b09734c8f40faff78d032..cc5fba73ed4ffbd6405363b75e71aad0f67ee3bc 100644 (file)
--- a/test/capability_test/new_capabilities_exception.list
+++ b/test/capability_test/new_capabilities_exception.list
@@ -56,3 +56,4 @@
 /usr/bin/charon = cap_setgid,cap_net_bind_service,cap_net_broadcast,cap_net_admin,cap_net_raw+ei
 /usr/bin/dlog_logger = cap_syslog+ei
 /usr/libexec/bluetooth/bluetoothd = cap_dac_override,cap_net_bind_service,cap_net_admin+ei
+/usr/bin/cat = cap_sys_ptrace+ei

diff --git a/test/new_service_test/target/mobile/systemd_service.list b/test/new_service_test/target/mobile/systemd_service.list
index 3f53dea71b2a1d95601065b252c1997a6fde43e2..5dce964ab578f0af311cddd18957bb7a03197675 100755 (executable)
--- a/test/new_service_test/target/mobile/systemd_service.list
+++ b/test/new_service_test/target/mobile/systemd_service.list
@@ -43,6 +43,7 @@ device-policy-manager.service;security_fw;security_fw;System;
 device-policy-syspopup.service;security_fw;security_fw;System;
 deviced.service;root;root;System::Privileged;
 display-manager.service;root;root;System;
+display-manager-monitor.service;graphic_fw;graphic_fw;System;
 dlog_logger.service;log;log;System;
 download-provider.service;web_fw;web_fw;System;
 emergency.service;root;root;System;

diff --git a/test/new_service_test/target/wearable/systemd_service.list b/test/new_service_test/target/wearable/systemd_service.list
index 9ee103eb1b97456223dc4ac9034275557b8a4714..6351fa878ae21e56e34cb0133784ed6f0334ad94 100755 (executable)
--- a/test/new_service_test/target/wearable/systemd_service.list
+++ b/test/new_service_test/target/wearable/systemd_service.list
@@ -35,6 +35,7 @@ device-policy-manager.service;security_fw;security_fw;System;
 device-policy-syspopup.service;security_fw;security_fw;System;
 deviced.service;root;root;System::Privileged;
 display-manager.service;root;root;System;
+display-manager-monitor.service;graphic_fw;graphic_fw;System;
 dlog_logger.service;log;log;System;
 download-provider.service;web_fw;web_fw;System;
 emergency.service;root;root;System;