Add CAP_SYS_ADMIN capability

Launchpad need additional capability to unshare mount namespace.

Change-Id: I96277437b689c32683e46556d79b12cbb3d6e213

diff --git a/packaging/launchpad.spec b/packaging/launchpad.spec
index a71aa62..3f9ddbf 100644 (file)
--- a/packaging/launchpad.spec
+++ b/packaging/launchpad.spec
@@ -106,9 +106,9 @@ ln -sf ../launchpad-process-pool.service %{buildroot}%{_unitdir_user}/basic.targ
 %{_unitdir_user}/sockets.target.wants/launchpad-process-pool.socket
 %{_unitdir_user}/basic.target.wants/launchpad-process-pool.service
 %if 0%{?tizen_feature_priority_change} || 0%{?tizen_feature_loader_priority}
-%caps(cap_mac_admin,cap_dac_override,cap_setgid,cap_sys_nice=ei) %{_bindir}/launchpad-process-pool
+%caps(cap_mac_admin,cap_dac_override,cap_setgid,cap_sys_admin,cap_sys_nice=ei) %{_bindir}/launchpad-process-pool
 %else
-%caps(cap_mac_admin,cap_dac_override,cap_setgid=ei) %{_bindir}/launchpad-process-pool
+%caps(cap_mac_admin,cap_dac_override,cap_setgid,cap_sys_admin=ei) %{_bindir}/launchpad-process-pool
 %endif
 %attr(0644,root,root) %{_libdir}/liblaunchpad.so.*
 
@@ -122,7 +122,7 @@ ln -sf ../launchpad-process-pool.service %{buildroot}%{_unitdir_user}/basic.targ
 %license LICENSE
 %{_prefix}/share/aul/default.loader
 %if 0%{?tizen_feature_priority_change} || 0%{?tizen_feature_loader_priority}
-%caps(cap_setgid,cap_sys_nice=ei) %{_bindir}/launchpad-loader
+%caps(cap_setgid,cap_sys_admin,cap_sys_nice=ei) %{_bindir}/launchpad-loader
 %else
-%caps(cap_setgid=ei) %{_bindir}/launchpad-loader
+%caps(cap_setgid,cap_sys_admin=ei) %{_bindir}/launchpad-loader
 %endif