Smack capability removed (CAP_MAC_ADMIN, CAP_MAC_OVERRIDE)

Change-Id: I0e1a92b85430bad8cd5427bda4fb4fc15f0ffb10
Signed-off-by: kj7.sung <kj7.sung@samsung.com>

diff --git a/lbs-server/org.tizen.lbs.Providers.LbsServer.service.in b/lbs-server/org.tizen.lbs.Providers.LbsServer.service.in
index f964795..5dffca4 100644 (file)
--- a/lbs-server/org.tizen.lbs.Providers.LbsServer.service.in
+++ b/lbs-server/org.tizen.lbs.Providers.LbsServer.service.in
@@ -1,5 +1,6 @@
 [D-BUS Service]
 Name=org.tizen.lbs.Providers.LbsServer
-Exec=@BIN_DIR@/lbs-server
+Exec=/bin/false
 User=root
 Group=root
+SystemdService=lbs-server.service

diff --git a/packaging/lbs-server.changes b/packaging/lbs-server.changes
index 0185977..4e3e01f 100644 (file)
--- a/packaging/lbs-server.changes
+++ b/packaging/lbs-server.changes
@@ -1,3 +1,9 @@
+[Version]      lbs-server_1.0.3
+[Date]         9 Jun 2016
+[Problem]      Smack capability removed.
+[Developer]    Kyoungjun Sung <kj7.sung@samsung.com>
+
+================================================================================
 [Version]      lbs-server_1.0.2
 [Date]         3 Jun 2016
 [Problem]      Change service state behavior when WPS searching mode.

diff --git a/packaging/lbs-server.service b/packaging/lbs-server.service
index 5888e29..6c569ca 100644 (file)
--- a/packaging/lbs-server.service
+++ b/packaging/lbs-server.service
@@ -8,6 +8,8 @@ ExecStart=/usr/bin/lbs-server
 MemoryLimit=10M
 User=root
 Group=root
+CapabilityBoundingSet=~CAP_MAC_ADMIN
+CapabilityBoundingSet=~CAP_MAC_OVERRIDE
 
 [Install]
 WantedBy=multi-user.target

diff --git a/packaging/lbs-server.spec b/packaging/lbs-server.spec
index d46f675..7fac989 100644 (file)
--- a/packaging/lbs-server.spec
+++ b/packaging/lbs-server.spec
@@ -1,6 +1,6 @@
 Name:    lbs-server
 Summary: LBS Server for Tizen
-Version: 1.0.2
+Version: 1.0.3
 Release: 1
 Group:   Location/Service
 License: Apache-2.0