Give capabilities to support update-control.

- cap_sys_admin to /usr/bin/update-manager
- cap_dac_override to /usr/sbin/img-verifier

Change-Id: I97330c8ba642e34bbff97b800bebc1faa95107d9

diff --git a/config/set_capability b/config/set_capability
index 0478a00e74bfae8e8659975b1c6e44783fcde804..ac26be753b43324b501a4a8b81db7e6029c267f4 100755 (executable)
--- a/config/set_capability
+++ b/config/set_capability
@@ -855,6 +855,21 @@ if [ -e "/usr/sbin/blockdev" ]
 then /usr/sbin/setcap cap_sys_admin=ei /usr/sbin/blockdev
 fi
 
+# Package              platform/core/system/update-control
+# Date                  Sep 07, 2020
+# Required             /usr/bin/update-manager : cap_sys_admin : ei
+# Required             /usr/sbin/img-verifier : cap_dac_override : ei
+# cap_sys_admin                To execute fota upgrade trigger script
+# cap_dac_override     To write image verify result to /opt/var/log
+
+if [ -e "/usr/bin/update-manager" ]
+then /usr/sbin/setcap cap_sys_admin=ei /usr/bin/update-manager
+fi
+
+if [ -e "/usr/sbin/img-verifier" ]
+then /usr/sbin/setcap cap_dac_override=ei /usr/sbin/img-verifier
+fi
+
 # TODO: MOVE TO OTHER SCRIPT OR REMOVE
 # Requested by sooyeon.kim@samsung.com (.voice) and dalton.lee@samsung.com (.multiassistant)
 dir_list=(".voice" ".multiassistant")