From: Konrad Kuchciak <k.kuchciak@samsung.com>
Date: Fri, 8 Nov 2019 10:13:19 +0000 (+0100)
Subject: Run as user with proper capabilities
X-Git-Tag: submit/tizen/20191121.124127~1
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=21579afefd3b98d0dd483b36a205e3c27f8c4d6e;p=platform%2Fcore%2Fsystem%2Fstability-monitor.git

Run as user with proper capabilities

Change-Id: I786e71de5b82bb8ed03edc48e212e182809f36a1
---

diff --git a/config/stability-monitor.service b/config/stability-monitor.service
index a67b7ca..ef854ad 100644
--- a/config/stability-monitor.service
+++ b/config/stability-monitor.service
@@ -3,6 +3,10 @@ Description=Stability monitoring daemon
 
 [Service]
 Type=simple
+User=stability_monitor
+Group=stability_monitor
+Capabilities=cap_sys_ptrace,cap_sys_module,cap_kill=i
+SecureBits=keep-caps
 SmackProcessLabel=System
 ExecStart=/usr/sbin/stability-monitor
 Restart=on-failure