[security] Add capabilities into service

Change-Id: I364e46287960741077804ea8c4442f0d61c0ef2f
Signed-off-by: Minje Ahn <minje.ahn@samsung.com>

diff --git a/packaging/media-server.service b/packaging/media-server.service
index bad1c88..d1b0bb7 100644 (file)
--- a/packaging/media-server.service
+++ b/packaging/media-server.service
@@ -10,6 +10,8 @@ Type=simple
 ExecStart=/usr/bin/media-server
 Restart=on-failure
 RestartSec=0
+Capabilities=cap_dac_read_search=i
+SecureBits=keep-caps
 
 [Install]
 WantedBy=multi-user.target

diff --git a/packaging/media-server.spec b/packaging/media-server.spec
index 8d5b958..836f869 100755 (executable)
--- a/packaging/media-server.spec
+++ b/packaging/media-server.spec
@@ -1,6 +1,6 @@
 Name:       media-server
 Summary:    A server for media content management
-Version:    0.3.44
+Version:    0.3.45
 Release:    0
 Group:      Multimedia/Service
 License:    Apache-2.0