From: Sangchul Lee <sc11.lee@samsung.com>
Date: Wed, 20 Dec 2017 02:45:53 +0000 (+0900)
Subject: Revise service file to add capabilities option
X-Git-Tag: submit/tizen/20180226.072000~3
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=511e31323de95ece6164be8fd6dc23429835e31c;p=platform%2Fcore%2Fmultimedia%2Flibmm-sound.git

Revise service file to add capabilities option

[Version] 0.12.8
[Issue Type] Enhancement

Change-Id: Ieefd933534c94d4af36678cd78d05fe8659fb7bb
Signed-off-by: Sangchul Lee <sc11.lee@samsung.com>
---

diff --git a/packaging/focus-server.service b/packaging/focus-server.service
index d11f4c1..9914d2d 100644
--- a/packaging/focus-server.service
+++ b/packaging/focus-server.service
@@ -9,6 +9,8 @@ MemoryLimit=50M
 User=multimedia_fw
 Group=multimedia_fw
 SmackProcessLabel=System
+SecureBits=keep-caps
+Capabilities=cap_fowner,cap_lease=i
 
 [Install]
 WantedBy=tizen-system.target
diff --git a/packaging/libmm-sound.spec b/packaging/libmm-sound.spec
index 772bfe6..0afbbb6 100644
--- a/packaging/libmm-sound.spec
+++ b/packaging/libmm-sound.spec
@@ -1,10 +1,11 @@
 Name:       libmm-sound
 Summary:    MMSound Package contains client lib and sound_server binary
-Version:    0.12.7
+Version:    0.12.8
 Release:    0
 Group:      System/Libraries
 License:    Apache-2.0
 Source0:    %{name}-%{version}.tar.gz
+Source2:    sound-server.service
 Source3:    sound-server.conf
 Source4:    focus-server.service
 Source5:    focus-server.path
@@ -99,6 +100,7 @@ install -d %{buildroot}%{_unitdir}/sysinit.target.wants
 %else
 install -d %{buildroot}%{_unitdir}/multi-user.target.wants
 %endif
+install -m0644 %{SOURCE2} %{buildroot}%{_unitdir}/
 install -m0644 %{SOURCE4} %{buildroot}%{_unitdir}/
 install -m0644 %{SOURCE5} %{buildroot}%{_unitdir}/
 %if "%{?TIZEN_PRODUCT_TV}" == "1"
@@ -139,6 +141,7 @@ ln -sf ../focus-server.path %{buildroot}%{_unitdir}/multi-user.target.wants/focu
 /etc/dbus-1/system.d/sound-server.conf
 /etc/dbus-1/system.d/focus-server.conf
 %{_datadir}/dbus-1/system-services/org.tizen.SoundServer.service
+%{_unitdir}/sound-server.service
 
 %files devel
 %defattr(-,root,root,-)
diff --git a/packaging/org.tizen.SoundServer.service b/packaging/org.tizen.SoundServer.service
index 0d3a64f..d23afd9 100644
--- a/packaging/org.tizen.SoundServer.service
+++ b/packaging/org.tizen.SoundServer.service
@@ -1,5 +1,4 @@
 [D-BUS Service]
 Name=org.tizen.SoundServer
-Exec=/usr/bin/sound_server -S
-User=multimedia_fw
-Group=multimedia_fw
+Exec=/bin/false
+SystemdService=sound-server.service
diff --git a/packaging/sound-server.service b/packaging/sound-server.service
new file mode 100644
index 0000000..143a809
--- /dev/null
+++ b/packaging/sound-server.service
@@ -0,0 +1,14 @@
+[Unit]
+Description=Start the sound-server
+
+[Service]
+ExecStart=/usr/bin/sound_server -S
+Restart=no
+RestartSec=0
+MemoryLimit=50M
+User=multimedia_fw
+Group=multimedia_fw
+SmackProcessLabel=System
+SecureBits=keep-caps
+Capabilities=cap_lease=i
+