pass: Get rid of CAP_DAC_OVERRIDE capability from systemd service

CAP_SYS_RESOURCE is enough to write the psi nodes, CAP_DAC_OVERRIDED
is no more needed. Thus, it is removed.

Change-Id: Ie51f967eae11260114e940692edd10e0216b26f4
Signed-off-by: Dongwoo Lee <dwoo08.lee@samsung.com>

diff --git a/systemd/pass.service.in b/systemd/pass.service.in
index 39b24de..0a66864 100644 (file)
--- a/systemd/pass.service.in
+++ b/systemd/pass.service.in
@@ -10,7 +10,7 @@ RestartSec=0
 KillSignal=SIGUSR1
 User=system_fw
 Group=system_fw
-Capabilities=cap_net_admin,cap_sys_ptrace,cap_dac_override,cap_sys_resource=i
+Capabilities=cap_net_admin,cap_sys_ptrace,cap_sys_resource=i
 SecureBits=keep-caps
 
 [Install]