From: Karol Lewandowski <k.lewandowsk@samsung.com>
Date: Tue, 17 Apr 2018 08:33:07 +0000 (+0200)
Subject: service: Move common options to sdbd.service
X-Git-Tag: submit/tizen/20180426.060340~5
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=5d2df4af01380736a240b652472f217f9766aebb;p=sdk%2Ftarget%2Fsdbd.git

service: Move common options to sdbd.service

 - Security options
 - Ensure tmp is mounted for PIDFile=/tmp/... to work

Change-Id: I40deac3492674ae70d249292d7ae3af95aad72f0
---

diff --git a/packaging/sdbd.service b/packaging/sdbd.service
index eb49efe..3ec4efc 100644
--- a/packaging/sdbd.service
+++ b/packaging/sdbd.service
@@ -1,10 +1,16 @@
 [Unit]
 Description=sdbd
+After=tmp.mount
 
 [Service]
+User=sdk
+Group=sdk
+SmackProcessLabel=System
 #If necessary, Put Environment variable settings in a file like below
 #ExecStartPre=/bin/bash -c "/bin/echo 'SDB_TRACE=all SDBD_LOG_PATH=/tmp' >> /tmp/.sdbdlog.conf"
 Type=simple
+Capabilities=cap_dac_override,cap_setgid,cap_setuid,cap_sys_admin=i
+SecureBits=keep-caps
 PIDFile=/tmp/.sdbd.pid
 RemainAfterExit=yes
 ExecStart=/usr/sbin/sdbd