Run as user with proper capabilities

Change-Id: I786e71de5b82bb8ed03edc48e212e182809f36a1

diff --git a/config/stability-monitor.service b/config/stability-monitor.service
index a67b7caa2b631976a98888113cd7bded01844388..ef854adbfb892486e741ddc22c977cd3f2f4b126 100644 (file)
--- a/config/stability-monitor.service
+++ b/config/stability-monitor.service
@@ -3,6 +3,10 @@ Description=Stability monitoring daemon
 
 [Service]
 Type=simple
+User=stability_monitor
+Group=stability_monitor
+Capabilities=cap_sys_ptrace,cap_sys_module,cap_kill=i
+SecureBits=keep-caps
 SmackProcessLabel=System
 ExecStart=/usr/sbin/stability-monitor
 Restart=on-failure