pass: Add CAP_SYS_RESOURCE capability to allow write in psi nodes

Since linux kernel 5.13, CAP_SYS_RESOURCE is required to write in psi
nodes with unprivileged process. Thus this adds it to systemd service
file.

Change-Id: Ie8027e8f99aa616770eda9d0718604e2e0189041
Signed-off-by: Dongwoo Lee <dwoo08.lee@samsung.com>

diff --git a/systemd/pass.service.in b/systemd/pass.service.in
index 0324dec4c62a7bcf3ebafb12844ec96297fa6d24..39b24de01733c1400eaf3584a85bc73ebaf38ddd 100644 (file)
--- a/systemd/pass.service.in
+++ b/systemd/pass.service.in
@@ -10,7 +10,7 @@ RestartSec=0
 KillSignal=SIGUSR1
 User=system_fw
 Group=system_fw
-Capabilities=cap_net_admin,cap_sys_ptrace,cap_dac_override=i
+Capabilities=cap_net_admin,cap_sys_ptrace,cap_dac_override,cap_sys_resource=i
 SecureBits=keep-caps
 
 [Install]