Give an exec label,capability to the smoke test tool 98/286398/2
authorilho kim <ilho159.kim@samsung.com>
Thu, 5 Jan 2023 07:22:59 +0000 (16:22 +0900)
committerilho kim <ilho159.kim@samsung.com>
Thu, 5 Jan 2023 09:58:11 +0000 (18:58 +0900)
The installer is executed with System::Privileged label and mac_override
Give an exec label and capability
so that the smoke test tool is executed with the same label

Change-Id: I6e756f231c7b93c21b884ca944ead46d324cf83f
Signed-off-by: ilho kim <ilho159.kim@samsung.com>
packaging/wgt-backend.spec
packaging/wgt-installer-tests.manifest

index 7ab44d9..958c74b 100644 (file)
@@ -73,8 +73,9 @@ mkdir -p %{buildroot}/etc/package-manager/backend
 ln -s %{_bindir}/wgt-backend %{buildroot}%{_sysconfdir}/package-manager/backend/wgt
 
 %post -n wgt-installer-tests
-/usr/sbin/setcap cap_chown,cap_dac_override,cap_fowner=eip %{_bindir}/wgt-installer-ut/smoke-test
-/usr/sbin/setcap cap_chown,cap_dac_override,cap_fowner=eip %{_bindir}/wgt-installer-ut/smoke-test-helper
+/usr/sbin/setcap cap_chown,cap_dac_override,cap_fowner,cap_mac_override=eip %{_bindir}/wgt-installer-ut/smoke-test
+/usr/sbin/setcap cap_chown,cap_dac_override,cap_fowner,cap_mac_override=eip %{_bindir}/wgt-installer-ut/smoke-test-helper
+/usr/sbin/setcap cap_chown,cap_dac_override,cap_fowner,cap_mac_override=eip %{_bindir}/wgt-installer-ut/extensive-smoke-test
 
 %files
 %manifest wgt-backend.manifest
index f5159f3..e0632fd 100644 (file)
@@ -3,8 +3,8 @@
                 <domain name="_" />
         </request>
         <assign>
-                <filesystem path="/usr/bin/wgt-installer-ut/smoke-test" exec_label="System" />
-                <filesystem path="/usr/bin/wgt-installer-ut/smoke-test-helper" exec_label="System" />
-                <filesystem path="/usr/bin/wgt-installer-ut/extensive-smoke-test" exec_label="System" />
+                <filesystem path="/usr/bin/wgt-installer-ut/smoke-test" exec_label="System::Privileged" />
+                <filesystem path="/usr/bin/wgt-installer-ut/smoke-test-helper" exec_label="System::Privileged" />
+                <filesystem path="/usr/bin/wgt-installer-ut/extensive-smoke-test" exec_label="System::Privileged" />
         </assign>
 </manifest>