Revert "Change attribute for daemon and set uid/gid into service"

This reverts commit 9bb3678d0885d6766adbff4ea7c7bd38c6283817.

Change-Id: Id2b191c3924f83247f49d541b26a51fef9f137b6

diff --git a/packaging/net-config.spec b/packaging/net-config.spec
index 01e01e9..f384165 100755 (executable)
--- a/packaging/net-config.spec
+++ b/packaging/net-config.spec
@@ -147,8 +147,8 @@ ln -sf %{_unitdir}/net-config.service %{_sysconfdir}/systemd/default-extra-depen
 
 %files
 %manifest net-config.manifest
-%attr(755,root,root) %{_sbindir}/*
-%attr(644,network_fw,network_fw) %{_sysconfdir}/resolv.conf
+%attr(500,root,root) %{_sbindir}/*
+%attr(644,root,root) %{_sysconfdir}/resolv.conf
 %attr(644,root,root) %{_datadir}/dbus-1/system-services/*
 #DBus DAC
 %attr(644,root,root) %{_sysconfdir}/dbus-1/system.d/*

diff --git a/resources/usr/lib/systemd/system/net-config.service b/resources/usr/lib/systemd/system/net-config.service
index 4eccf02..26685b4 100755 (executable)
--- a/resources/usr/lib/systemd/system/net-config.service
+++ b/resources/usr/lib/systemd/system/net-config.service
@@ -8,8 +8,8 @@ Type=forking
 SmackProcessLabel=System
 ExecStart=/usr/sbin/net-config
 Restart=always
-User=network_fw
-Group=network_fw
+CapabilityBoundingSet=~CAP_MAC_ADMIN
+CapabilityBoundingSet=~CAP_MAC_OVERRIDE
 
 [Install]
 WantedBy=multi-user.target