Fix capability to dotnet executables

- dotnet-loader, dotnet-hydra-loader, dotnet

Change-Id: I821251574d70e4c34bb969b39ffd927d85c0bf53

diff --git a/config/set_capability b/config/set_capability
index 99cdafbfc84333284f51ff2a47e7ca269457d9a2..6beaefd8d4e729440744635ba3db98183e2e143a 100755 (executable)
--- a/config/set_capability
+++ b/config/set_capability
@@ -438,9 +438,9 @@ fi
 # Owner                 Junghoon Park(jh9216.park@samsung.com)
 # Date                  Feb 25, 2020
 # Required              cap_setgid, cap_sys_admin, cap_sys_nice
-# cap_setgid           to use security_manager_prepare_app()
-# cap_sys_admin                to split mount namespace
-# cap_sys_nice         to change scheduling priority
+# cap_setgid           to use security_manager_prepare_app()
+# cap_sys_admin                to split mount namespace
+# cap_sys_nice         to change scheduling priority
 
 # TODO : condition check about launchpad-starter is temporary
 if [ -e "/usr/bin/app-defined-loader" ] && [ ! -e "/usr/bin/launchpad-starter" ]
@@ -450,9 +450,9 @@ fi
 # Package               platform/core/dotnet/launcher
 # Owner                 Woongsuk Cho(ws77.cho@samsung.com)
 # Date                  July 4, 2017
-# Required              cap_mac_admin, cap_setgid
-# cap_setgid           to change app process gid
-# cap_sys_admin                to split mount namespace
+# Required              cap_sys_admin, cap_setgid
+# cap_setgid            to change app process gid
+# cap_sys_admin         to split mount namespace
 
 if [ -e "/usr/bin/dotnet-launcher" ]
 then /usr/sbin/setcap cap_setgid,cap_sys_admin=ei /usr/bin/dotnet-launcher
@@ -467,6 +467,8 @@ fi
 
 if [ -e "/usr/bin/dotnet-hydra-loader" ]
 then /usr/sbin/setcap cap_setgid,cap_sys_admin=ei /usr/bin/dotnet-hydra-loader
+fi
+
 # Package               platform/core/dotnet/launcher
 # Owner                 Woongsuk Cho(ws77.cho@samsung.com)
 # Date                  April 10, 2020
@@ -487,6 +489,7 @@ fi
 
 if [ -e "/usr/bin/dotnet" ]
 then /usr/sbin/setcap cap_setgid,cap_sys_admin=ei /usr/bin/dotnet
+fi
 
 # Package               platform/core/telephony/telephony-daemon
 # Owner                 Shinhui Kang(sinikang@samsung.com)

diff --git a/test/capability_test/new_capabilities_exception.list b/test/capability_test/new_capabilities_exception.list
index 5f49af883b84591ffc916ed1e255dfb919ee796b..59e134483a9df9b2f3b116bae3a052f866fd06a8 100755 (executable)
--- a/test/capability_test/new_capabilities_exception.list
+++ b/test/capability_test/new_capabilities_exception.list
@@ -79,6 +79,5 @@
 /usr/bin/df = cap_dac_read_search+ei
 /usr/bin/crash-manager = cap_dac_override,cap_kill,cap_sys_ptrace+ei
 /usr/bin/memps = cap_dac_read_search,cap_sys_ptrace+ei
-/usr/bin/dotnet-hydra-launcher = cap_setgid,cap_sys_admin+ei
 /usr/bin/top = cap_sys_ptrace+ei
 /usr/bin/livedumper = cap_dac_override,cap_sys_ptrace+ei