Merge "Removed cap for mac override and change the label for resolv configuration...

diff --git a/packaging/net-config.spec b/packaging/net-config.spec
index 2e89a12..f86e329 100755 (executable)
--- a/packaging/net-config.spec
+++ b/packaging/net-config.spec
@@ -125,6 +125,7 @@ mkdir -p %{buildroot}%{_datadir}/license
 cp LICENSE %{buildroot}%{_datadir}/license/net-config
 
 %post
+chsmack -a 'System::Shared' %{_sysconfdir}/resolv.conf
 
 #Network logs
 mkdir -p /opt/usr/data/network

diff --git a/resources/usr/lib/systemd/system/net-config.service b/resources/usr/lib/systemd/system/net-config.service
index 8ef8b66..000ca9a 100755 (executable)
--- a/resources/usr/lib/systemd/system/net-config.service
+++ b/resources/usr/lib/systemd/system/net-config.service
@@ -9,6 +9,7 @@ ExecStartPre=-/usr/sbin/net-config.service
 ExecStart=/usr/sbin/net-config
 Restart=always
 CapabilityBoundingSet=~CAP_MAC_ADMIN
+CapabilityBoundingSet=~CAP_MAC_OVERRIDE
 
 [Install]
 WantedBy=multi-user.target