Add CapabilityBoundingSet

Change-Id: Ida4f5cf865408942d45eac5985204c5ca332bbb3
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>

diff --git a/packaging/mobileap-agent.service b/packaging/mobileap-agent.service
index c80db3c..cee8875 100644 (file)
--- a/packaging/mobileap-agent.service
+++ b/packaging/mobileap-agent.service
@@ -8,5 +8,7 @@ Type=dbus
 BusName=org.tizen.MobileapAgent
 SmackProcessLabel=System
 ExecStart=/usr/bin/mobileap-agent
+CapabilityBoundingSet=~CAP_MAC_ADMIN
+CapabilityBoundingSet=~CAP_MAC_OVERRIDE
 Capabilities=cap_dac_override,cap_net_bind_service,cap_net_broadcast,cap_net_admin,cap_net_raw,cap_sys_admin=i
 SecureBits=keep-caps

diff --git a/packaging/mobileap-agent.spec b/packaging/mobileap-agent.spec
index 012a801..a9110a2 100644 (file)
--- a/packaging/mobileap-agent.spec
+++ b/packaging/mobileap-agent.spec
@@ -1,6 +1,6 @@
 Name:          mobileap-agent
 Summary:       Mobile AP daemon for setting tethering environments
-Version:       1.0.80
+Version:       1.0.81
 Release:       1
 Group:         System/Network
 License:       Apache-2.0
@@ -68,7 +68,7 @@ cp %{SOURCE2} %{buildroot}%{_datadir}/dbus-1/system-services/org.tizen.MobileapA
 
 %post
 /bin/chmod +x /opt/etc/dump.d/module.d/tethering_dump.sh
-/usr/sbin/setcap cap_dac_override,cap_fowner,cap_net_bind_service,cap_net_admin+eip /usr/bin/mobileap-agent
+#/usr/sbin/setcap cap_dac_override,cap_fowner,cap_net_bind_service,cap_net_admin+eip /usr/bin/mobileap-agent
 
 %files
 %manifest mobileap-agent.manifest