From: Mateusz Moscicki <m.moscicki2@partner.samsung.com>
Date: Fri, 6 Aug 2021 08:24:27 +0000 (+0200)
Subject: Change permissions with which the udev-trigger-dmbow@.service is started
X-Git-Tag: submit/tizen/20210817.140154~1
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=5e7db98f0b615daa88879dbe5eca09d69fd3dc56;p=platform%2Fcore%2Fsystem%2Fsystem-rw-update.git

Change permissions with which the udev-trigger-dmbow@.service is started

Change-Id: I2f0f383e4aff19e016fad410ab634f95b81e648e
---

diff --git a/units/udev-trigger-dmbow@.service b/units/udev-trigger-dmbow@.service
index 294619f..85c92ef 100644
--- a/units/udev-trigger-dmbow@.service
+++ b/units/udev-trigger-dmbow@.service
@@ -14,4 +14,8 @@ ConditionPathExists=/dev/mapper/bowdev_%i
 [Service]
 SmackProcessLabel=System
 Type=oneshot
+User=system_fw
+Group=system_fw
+Capabilities=cap_dac_override=i
+SecureBits=keep-caps
 ExecStart=/usr/sbin/udevadm trigger -c change /dev/mapper/bowdev_%i