Retrieve CAP_DAC_OVERRIDE from mobileap-agent and dnsmasq 25/138825/2
authorjin-gyu.kim <jin-gyu.kim@samsung.com>
Fri, 14 Jul 2017 02:29:17 +0000 (11:29 +0900)
committerjin-gyu.kim <jin-gyu.kim@samsung.com>
Fri, 14 Jul 2017 02:31:02 +0000 (11:31 +0900)
- GID of /opt/var/lib/misc was changed, therefore no need to have this cap.

Change-Id: Ieb6137d2304b0971a428a7dca8317aa7ae0690c4

config/set_capability

index 87f6b2b8342cb76477b61b3fc918124eff251fc8..40292e003345b6e4356cf6e7fca4b346c62b706d 100755 (executable)
@@ -210,13 +210,12 @@ fi
 # Owner                        Seonah Moon(seonah1.moon@samsung.com)
 # Date                 Oct 7, 2016
 # Required             cap_dac_override, cap_fowner, cap_net_admin, cap_net_bind_service
-# cap_dac_override     network interface configruration
 # cap_fowner           network interface configruration
 # cap_net_admin                to use ioctl socket
 # cap_net_bind_service to call bind
 
 if [ -e "/usr/bin/mobileap-agent" ]
-then /usr/sbin/setcap cap_dac_override,cap_fowner,cap_net_admin,cap_net_bind_service=eip /usr/bin/mobileap-agent
+then /usr/sbin/setcap cap_fowner,cap_net_admin,cap_net_bind_service=eip /usr/bin/mobileap-agent
 fi
 
 # Package              wpa_supplicant
@@ -237,14 +236,13 @@ fi
 # Date                 Oct 7, 2016
 # Required             cap_dac_override, cap_net_bind_service, cap_net_broadcast, cap_net_admin
 # Capability Bit       only effective and inheriable
-# cap_dac_override     network interface configruration
 # cap_net_admin                to use ioctl socket
 # cap_net_bind_service to call bind
 # cap_net_broadcast    to make socket broadcasts, and listen to multicasts
 # cap_net_raw          to make socket permission(ICMPv6)
 
 if [ -e "/usr/bin/dnsmasq" ]
-then /usr/sbin/setcap cap_dac_override,cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw=ei /usr/bin/dnsmasq
+then /usr/sbin/setcap cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw=ei /usr/bin/dnsmasq
 fi
 
 # Package              iproute2