Grant capabilities to perform factory reset 12/159212/1
authorKonrad Kuchciak <k.kuchciak@samsung.com>
Tue, 7 Nov 2017 11:08:37 +0000 (12:08 +0100)
committerKonrad Kuchciak <k.kuchciak@samsung.com>
Tue, 7 Nov 2017 11:32:54 +0000 (12:32 +0100)
Change-Id: Ib66debfc114f7f0a5f374791585955f55e5362e6
Signed-off-by: Konrad Kuchciak <k.kuchciak@samsung.com>
packaging/factory-reset.service

index ab6a4a442d659e7c5e94a85c8b4521ff64a30e53..97277f5673b4d2c64c0f2c4946599a498c83ffea 100644 (file)
@@ -7,7 +7,8 @@ ConditionPathExists=|/opt/.factoryreset
 Type=oneshot
 ExecStartPre=/usr/bin/rm -f /opt/.factoryreset
 ExecStart=/usr/bin/factory-reset
-SmackProcessLabel=System
+SmackProcessLabel=System::Privileged
+CapabilityBoundingSet=cap_dac_override cap_sys_admin cap_mac_override cap_mac_admin cap_sys_boot cap_chown cap_fowner
 
 [Install]
 WantedBy=multi-user.target