From: Sangyoon Jang <jeremy.jang@samsung.com>
Date: Wed, 2 Aug 2017 07:53:04 +0000 (+0900)
Subject: Fix capability of pkgmgr-server
X-Git-Tag: accepted/tizen/unified/20170807.150542~2
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;ds=sidebyside;h=15a52686f6b187f7cbd2bb48be7c8ae765060319;p=platform%2Fcore%2Fappfw%2Fpkgmgr-server.git

Fix capability of pkgmgr-server

pkgmgr-server will have capabilities only by inheritance.

Change-Id: Iafd97f7f6e5c31357e16ee3811e7415900017eaa
Signed-off-by: Sangyoon Jang <jeremy.jang@samsung.com>
---

diff --git a/package-manager.service.in b/package-manager.service.in
index 0bfb548..626604b 100644
--- a/package-manager.service.in
+++ b/package-manager.service.in
@@ -5,7 +5,6 @@ Description=Tizen Package Manager
 User=app_fw
 Group=app_fw
 SmackProcessLabel=System
-# CAP_DAC_OVERRIDE should be inheritable for using xdelta3
-Capabilities=cap_dac_override=i
+Capabilities=cap_chown,cap_dac_override,cap_fsetid,cap_kill,cap_setgid,cap_setuid=i
 SecureBits=keep-caps
 ExecStart=@PREFIX@/bin/pkgmgr-server