Remove permitted flag from hostapd's capability.

Change-Id: Icd9b849d493077e67bad0cfb860ad629ac44c38e

diff --git a/config/set_capability b/config/set_capability
index 37421e58d4d8a0aa4d1d202c6a2e5ea3b08e4e69..72bb00eb50cd06ac91ac1b77f5d2657c6cec1d87 100755 (executable)
--- a/config/set_capability
+++ b/config/set_capability
@@ -242,7 +242,7 @@ fi
 # cap_dac_override     to access bridge device
 
 if [ -e "/usr/bin/hostapd" ]
-then /usr/sbin/setcap cap_net_admin,cap_net_bind_service,cap_net_raw,cap_dac_override=eip /usr/bin/hostapd
+then /usr/sbin/setcap cap_net_admin,cap_net_bind_service,cap_net_raw,cap_dac_override=ei /usr/bin/hostapd
 fi
 
 # Package              dnsmasq

diff --git a/test/capability_test/new_capabilities_exception.list b/test/capability_test/new_capabilities_exception.list
index 9c91c22121d01d9e5c19dff1c909595fbe20ea8d..d6d141d17cd7ec6ef70fd0fb789fa81357ec6402 100755 (executable)
--- a/test/capability_test/new_capabilities_exception.list
+++ b/test/capability_test/new_capabilities_exception.list
@@ -3,7 +3,7 @@
 /usr/sbin/named = cap_net_bind_service,cap_net_admin,cap_sys_chroot+ei
 /usr/sbin/lwresd = cap_net_bind_service,cap_net_admin,cap_sys_chroot+ei
 /usr/sbin/sdbd = cap_dac_override,cap_setgid,cap_setuid,cap_sys_admin+ei
-/usr/bin/hostapd = cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw+eip
+/usr/bin/hostapd = cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw+ei
 /usr/sbin/ip = cap_net_admin+ei
 /usr/bin/wpa_supplicant = cap_dac_override,cap_net_admin,cap_net_raw+ei
 /usr/bin/focus_server = cap_fowner,cap_lease+ei