From: jin-gyu.kim Date: Wed, 3 Feb 2021 07:08:18 +0000 (+0900) Subject: Add cap_sys_module capability to wfd-manager. X-Git-Tag: submit/tizen/20210209.010000^0 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=2e80a9470d80a18fe999b1fcbf3c05efa28fb37d;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git Add cap_sys_module capability to wfd-manager. Change-Id: Ie9b10ac6f1d97b71eb73f0d1ab65a5d5f5b370cd --- diff --git a/config/set_capability b/config/set_capability index 05a17b1..8f9c5e3 100755 --- a/config/set_capability +++ b/config/set_capability @@ -543,14 +543,15 @@ fi # Package platform/core/connectivity/wifi-direct-manager # Owner Jaehyun Kim(jeik01.kim@samsung.com) # Date July 18, 2017 -# Required /usr/bin/wfd-manager : cap_net_bind_service, cap_net_admin, cap_net_broadcast, cap_net_raw : ei +# Required /usr/bin/wfd-manager : cap_net_bind_service, cap_net_admin, cap_net_broadcast, cap_net_raw, cap_sys_module : ei # cap_net_bind_service using DHCP port # cap_net_admin interface IP address configuration # cap_net_broadcast DHCP packet broadcasting # cap_net_raw open raw socket for DHCP +# cap_sys_module to use insmod if [ -e "/usr/bin/wfd-manager" ] -then /usr/sbin/setcap cap_net_bind_service,cap_net_broadcast,cap_net_admin,cap_net_raw=ei $(/usr/bin/readlink -f /usr/bin/wfd-manager) +then /usr/sbin/setcap cap_net_bind_service,cap_net_broadcast,cap_net_admin,cap_net_raw,cap_sys_module=ei $(/usr/bin/readlink -f /usr/bin/wfd-manager) fi # Belows are tools which wfd manager service is using.