From: Jin-gyu Kim Date: Fri, 3 Sep 2021 23:08:00 +0000 (+0900) Subject: Remove an unnecessary capability. X-Git-Tag: submit/tizen_6.0/20210910.052738^0 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=1264e603c36eca3f7c8980246855755cc456effc;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git Remove an unnecessary capability. - cap_fowner is not needed for pkgmgr-server. Change-Id: I605f138f51a1e0bb68f524697d7e72ef8b9d70fb --- diff --git a/config/set_capability b/config/set_capability index 4d17968..a666e80 100755 --- a/config/set_capability +++ b/config/set_capability @@ -89,17 +89,16 @@ fi # Package pkgmgr-server # Owner Jongmyeong Ko(jongmyeong.ko@samsung.com) # Date June 30, 2016 -# Required /usr/bin/pkgmgr-server : cap_chown, cap_dac_override, cap_fsetid, cap_kill, cap_setgid, cap_setuid, cap_fowner : ei +# Required /usr/bin/pkgmgr-server : cap_chown, cap_dac_override, cap_fsetid, cap_kill, cap_setgid, cap_setuid : ei # cap_chown fchown : change owner # cap_dac_override Access user and global database file of package manager # cap_fsetid fchmod : change mode # cap_kill killpg function # cap_setgid setgid and setgroups function # cap_setuid setuid function -# cap_fowner to change copied resources' ownership (for /usr/bin/res-copy) if [ -e "/usr/bin/pkgmgr-server" ] -then /usr/sbin/setcap cap_chown,cap_dac_override,cap_fsetid,cap_kill,cap_setgid,cap_setuid,cap_fowner=ei /usr/bin/pkgmgr-server +then /usr/sbin/setcap cap_chown,cap_dac_override,cap_fsetid,cap_kill,cap_setgid,cap_setuid=ei /usr/bin/pkgmgr-server fi # Package app-installers