dlog_logger: change User & Group from root to log

The security team requests dlog_logger daemon's UID for log ( not root ).

Change-Id: If31a729af6ab4d12dcc807b394f0f19916bf4169
Signed-off-by: Hongkuk, Son <hongkuk.son@samsung.com>
Signed-off-by: chan lee <chan45.lee@samsung.com>

diff --git a/packaging/dlog_logger.service b/packaging/dlog_logger.service
index 7ee6f1d..9b165ee 100755 (executable)
--- a/packaging/dlog_logger.service
+++ b/packaging/dlog_logger.service
@@ -2,6 +2,10 @@
 Description=Dumps dlog logs onto disk
 
 [Service]
+Nice=19
+User=log
+Group=log
+SmackProcessLabel=dlogutil
 ExecStart=/usr/bin/dlog_logger -b 99 -t 600
 Restart=always
 

diff --git a/packaging/dlogutil.manifest b/packaging/dlogutil.manifest
index fc0a1bf..eb0a07b 100755 (executable)
--- a/packaging/dlogutil.manifest
+++ b/packaging/dlogutil.manifest
@@ -1,6 +1,11 @@
 <manifest>
        <define>
                <domain name="dlogutil"/>
+                <request>
+                        <smack request="device::app_logging" type="r"/>
+                        <smack request="device::sys_logging" type="r"/>
+                        <smack request="system::sys_logging" type="rwx"/>
+                </request>
        </define>
        <assign>
                <filesystem path="/usr/bin/dlog_logger" label="_" exec_label="none"/>