Set SmackProcessLabel in service file according to the profile

Change-Id: I2228ad4a335ee9b06f0a2f088cec0bc6afaf0a9a
Signed-off-by: Yunjin Lee <yunjin-.lee@samsung.com>

diff --git a/packaging/gumd.spec b/packaging/gumd.spec
index 0a59e5c..40da7ea 100644 (file)
--- a/packaging/gumd.spec
+++ b/packaging/gumd.spec
@@ -89,6 +89,9 @@ cp -a %{SOURCE1001} %{name}.manifest
 cp -a %{SOURCE1002} libgum.manifest
 %if %{disable_cap_admin} == 1
 echo "CapabilityBoundingSet=~CAP_MAC_ADMIN" >> data/gumd.service
+echo "SmackProcessLabel=System" >> data/gumd.service
+%else
+echo "SmackProcessLabel=System::Privileged" >> data/gumd.service
 %endif
 
 %build