Add CAP_SYS_PTRACE capability to amd

To debug without killing the blocked app process, amd must have CAP_SYS_PTRACE cap.
amd prints backtrace of an blocked app process.

Change-Id: I3a3ab61444f6dabf57327308efcef1ab1e975af4
Signed-off-by: Changgyu Choi <changyu.choi@samsung.com>

diff --git a/config/set_capability b/config/set_capability
index a1efcb2fc07dd25b16235dd4ba1a95cc811cfe56..0d06e0992a03007046fbbde4cae87ee3701b4699 100755 (executable)
--- a/config/set_capability
+++ b/config/set_capability
@@ -541,8 +541,8 @@ fi
 # Package               platform/core/appfw/amd
 # Owner                 Junghoon Park(jh9216.park@samsung.com)
 # Date                  July 4, 2017
-# Required              /usr/bin/amd : cap_kill, cap_dac_override, cap_sys_admin, cap_fowner : ei
-# Required              /usr/bin/amd : cap_setuid, cap_mac_admin, cap_kill, cap_dac_override, cap_sys_admin, cap_fowner : ei
+# Required              /usr/bin/amd : cap_kill, cap_dac_override, cap_sys_admin, cap_fowner, cap_sys_ptrace : ei
+# Required              /usr/bin/amd : cap_setuid, cap_mac_admin, cap_kill, cap_dac_override, cap_sys_admin, cap_fowner, cap_sys_ptrace : ei
 # cap_kill             to kill app process
 # cap_dac_override     to access wayland and app socket, to check private sharing path
 # cap_sys_admin                to use mount namespace
@@ -552,9 +552,9 @@ then
        # This is needed for headless profile.
        if [ -e "/usr/share/amd/mod/libamd-mod-launchpad.so" ]
        then
-               /usr/sbin/setcap cap_setuid,cap_setgid,cap_mac_admin,cap_kill,cap_dac_override,cap_sys_admin,cap_fowner=ei /usr/bin/amd
+               /usr/sbin/setcap cap_setuid,cap_setgid,cap_mac_admin,cap_kill,cap_dac_override,cap_sys_admin,cap_fowner,cap_sys_ptrace=ei /usr/bin/amd
        else
-               /usr/sbin/setcap cap_kill,cap_dac_override,cap_sys_admin,cap_fowner=ei /usr/bin/amd
+               /usr/sbin/setcap cap_kill,cap_dac_override,cap_sys_admin,cap_fowner,cap_sys_ptrace=ei /usr/bin/amd
        fi
 fi