Add cap_sys_admin to amd.

Change-Id: I8ae0ceffec6f02865ae6426a133544a45b2d4eca

diff --git a/config/set_capability b/config/set_capability
index 97f097208ea4e5f65a0b421fc0c770b96c5a644b..63ae130907fdda9da2f9aaa472fd1588e8f58150 100755 (executable)
--- a/config/set_capability
+++ b/config/set_capability
@@ -501,14 +501,15 @@ fi
 # Required              cap_kill, cap_dac_override
 # cap_kill             to kill app process
 # cap_dac_override     to access wayland and app socket, to check private sharing path
+# cap_sys_admin                to use mount namespace
 
 if [ -e "/usr/bin/amd" ] && [ "$(/usr/bin/rpm -qa | /usr/bin/grep amd-mod-launchpad)" == "" ]
-then /usr/sbin/setcap cap_kill,cap_dac_override=ep /usr/bin/amd
+then /usr/sbin/setcap cap_kill,cap_dac_override,cap_sys_admin=ei /usr/bin/amd
 fi
 
 # This is needed for headless profile.
 if [ -e "/usr/bin/amd" ] && [ "$(/usr/bin/rpm -qa | /usr/bin/grep amd-mod-launchpad)" != "" ]
-then /usr/sbin/setcap cap_setuid,cap_setgid,cap_mac_admin,cap_kill,cap_dac_override=eip /usr/bin/amd
+then /usr/sbin/setcap cap_setuid,cap_setgid,cap_mac_admin,cap_kill,cap_dac_override,cap_sys_admin=ei /usr/bin/amd
 fi
 
 # Package               platform/framework/web/crosswalk-tizen

diff --git a/test/capability_test/new_capabilities_exception.list b/test/capability_test/new_capabilities_exception.list
index e61d1979d79178fc3260374211203f4b7f15c1a1..33b71832a82540fd35bb5b62bd1cb3ec01aa12d1 100644 (file)
--- a/test/capability_test/new_capabilities_exception.list
+++ b/test/capability_test/new_capabilities_exception.list
@@ -16,7 +16,8 @@
 /usr/bin/csr-server = cap_dac_override,cap_fowner+eip
 /usr/bin/pkgmgr-server = cap_chown,cap_dac_override,cap_fsetid,cap_kill,cap_setgid,cap_setuid+eip
 /usr/bin/muse-server = cap_dac_override+eip
-/usr/bin/amd = cap_dac_override,cap_kill+ep
+/usr/bin/amd = cap_dac_override,cap_kill,cap_setgid,cap_setuid,cap_sys_admin,cap_mac_admin+ei
+/usr/bin/amd = cap_dac_override,cap_kill,cap_sys_admin+ei
 /usr/bin/wrt-loader = cap_setgid,cap_sys_admin+ei
 /usr/bin/tpk-backend = cap_chown,cap_dac_override,cap_fowner+eip
 /usr/bin/launchpad-loader = cap_setgid,cap_sys_admin+ei