From: jooseong lee Date: Thu, 11 Aug 2016 00:56:39 +0000 (+0900) Subject: Add cap_dac_override to xdelta3 X-Git-Tag: submit/tizen/20160811.013634^0 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=26c6c9a76f679505db01182e3d038428a9b09f7e;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git Add cap_dac_override to xdelta3 Change-Id: I786cf860298da90d0158fc45c42af5714583bfba Signed-off-by: jooseong lee --- diff --git a/config/set_capability b/config/set_capability index bc97fc0..517d065 100755 --- a/config/set_capability +++ b/config/set_capability @@ -11,10 +11,10 @@ PATH=/bin:/usr/bin:/sbin:/usr/sbin # cap_setuid set user id per each user logged in # cap_setgid set group id following user id -# Owner Changseok Oh(seok.oh@samsung.com) -# Date June 23, 2016 -# Required cap_setuid, cap_dac_override, cap_sys_admin -# cap_setuid set child process's uid to root +# Owner Changseok Oh(seok.oh@samsung.com) +# Date June 23, 2016 +# Required cap_setuid, cap_dac_override, cap_sys_admin +# cap_setuid set child process's uid to root # cap_dac_override bypass permission check at pull/push # cap_sys_admin remount at rpm installation @@ -114,6 +114,7 @@ PATH=/bin:/usr/bin:/sbin:/usr/sbin # cap_dac_override access to /home/$USER/apps_rw # cap_chown use chown API # cap_fowner use chmod API + /usr/sbin/setcap cap_dac_override,cap_chown,cap_fowner=eip /usr/bin/tpk-backend # Package wgt-backend @@ -123,4 +124,13 @@ PATH=/bin:/usr/bin:/sbin:/usr/sbin # cap_dac_override access to /home/$USER/apps_rw # cap_chown use chown API # cap_fowner use chmod API + /usr/sbin/setcap cap_dac_override,cap_chown,cap_fowner=eip /usr/bin/wgt-backend + +# Package xdelta3 +# Owner Jongmyeong Ko(jongmyeong.ko@samsung.com) +# Date Aug 10, 2016 +# Required cap_dac_override +# cap_dac_override access to /home/$USER/apps_rw + +/usr/sbin/setcap cap_dac_override=eip /usr/bin/xdelta3