Set the SMACK security label to run given executable file in systemd services

Change-Id: Ie47499a371a35752e019ca43ac99e7b233d5a9ee
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>

diff --git a/filesystem/usr/lib/systemd/system/emul-common-preinit.service b/filesystem/usr/lib/systemd/system/emul-common-preinit.service
index 441024d87fb58fb7505898f6fcb94d17f2d44c80..4e4748875ca67c9ebba106fe99705b7e89ee141a 100644 (file)
--- a/filesystem/usr/lib/systemd/system/emul-common-preinit.service
+++ b/filesystem/usr/lib/systemd/system/emul-common-preinit.service
@@ -13,6 +13,7 @@ Type=oneshot
 #ExecStartPre=/bin/sh -c '. /etc/emulator/prerun'
 
 # W/A for alarm-service
+SmackProcessLabel=System
 ExecStart=/bin/touch /dev/rtc1
 ExecStartPost=/usr/bin/chsmack -a "_" /etc/config/model-config.xml
 

diff --git a/filesystem/usr/lib/systemd/system/emul-setup-audio-volume.service b/filesystem/usr/lib/systemd/system/emul-setup-audio-volume.service
index a165f56828abf444bd8613f34e0b5e3b6c924500..de307977a11d3169c8988bf6239b5577a7b1fb31 100644 (file)
--- a/filesystem/usr/lib/systemd/system/emul-setup-audio-volume.service
+++ b/filesystem/usr/lib/systemd/system/emul-setup-audio-volume.service
@@ -4,6 +4,7 @@ DefaultDependencies=no
 
 [Service]
 Type=oneshot
+SmackProcessLabel=System
 ExecStart=/usr/bin/amixer "cset" "name='Master Playback Switch'" "1"
 ExecStart=/usr/bin/amixer "cset" "name='Master Playback Volume'" "50"
 ExecStart=/usr/bin/amixer "cset" "name='PCM Playback Switch'" "1"