From: Jin-gyu Kim <jin-gyu.kim@samsung.com>
Date: Wed, 15 Jun 2022 04:45:00 +0000 (+0900)
Subject: Add cap_sys_ptrace to /usr/bin/pass
X-Git-Tag: submit/tizen/20220616.073240^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=3598717f9af1a82db57ae0bbad5587838d33f625;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git

Add cap_sys_ptrace to /usr/bin/pass

Change-Id: I48e8f16f4159021c4209a44e7bb13507db1797bf
---

diff --git a/config/set_capability b/config/set_capability
index 5d19338..f4e9c87 100755
--- a/config/set_capability
+++ b/config/set_capability
@@ -958,11 +958,12 @@ fi
 
 # Package		platform/core/system/pass
 # Date			Feb 23, 2022
-# Required		/usr/bin/pass : cap_net_admin : ei
-# cap_net_Admin		To use Netlink interface
+# Required		/usr/bin/pass : cap_net_admin,cap_sys_ptrace : ei
+# cap_net_admin		To use Netlink interface
+# cap_sys_ptrace	To access procfs
 
 if [ -e "/usr/bin/pass" ]
-then /usr/sbin/setcap cap_net_admin=ei /usr/bin/pass
+then /usr/sbin/setcap cap_net_admin,cap_sys_ptrace=ei /usr/bin/pass
 fi
 
 # These are not related with the capability, but place here to run in generic-security.post