Fix csr-server capability as inheritable

Change-Id: Ide4a5c8b6e5416671ad0ca6d54ee01ff2852bd9a
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>

diff --git a/systemd/csr.service.in b/systemd/csr.service.in
index 87f35fb..7fbf21d 100644 (file)
--- a/systemd/csr.service.in
+++ b/systemd/csr.service.in
@@ -6,6 +6,8 @@ Requires=@SERVICE_NAME@-cs.socket @SERVICE_NAME@-wp.socket @SERVICE_NAME@-admin.
 User=@SERVICE_USER@
 Group=@SERVICE_GROUP@
 SmackProcessLabel=@SMACK_DOMAIN_NAME@
+SecureBits=keep-caps
+Capabilities=cap_dac_override,cap_fowner=i
 ExecStart=@BIN_DIR@/@SERVICE_NAME@-server
 Sockets=@SERVICE_NAME@-cs.socket
 Sockets=@SERVICE_NAME@-wp.socket