From: Dongwoo Lee <dwoo08.lee@samsung.com>
Date: Tue, 31 Jan 2023 03:08:28 +0000 (+0900)
Subject: pass: Add capability for writing to procfs node
X-Git-Tag: accepted/tizen/7.0/unified/20230216.140317^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=85c1e9efdf9f2db2d435fb00383ea8f65caa205d;p=platform%2Fcore%2Fsystem%2Fpass.git

pass: Add capability for writing to procfs node

In order to use global memory pressure stall information, pass can
write to the node '/proc/pressure/memory' and it requires
'CAP_DAC_OVERRIDE' capability. Thus, this adds the capability to
service file.

Change-Id: I1765f79e85908879fa8917212059b761bab45821
Signed-off-by: Dongwoo Lee <dwoo08.lee@samsung.com>
---

diff --git a/systemd/pass.service.in b/systemd/pass.service.in
index ac5f160..0324dec 100644
--- a/systemd/pass.service.in
+++ b/systemd/pass.service.in
@@ -10,7 +10,7 @@ RestartSec=0
 KillSignal=SIGUSR1
 User=system_fw
 Group=system_fw
-Capabilities=cap_net_admin,cap_sys_ptrace=i
+Capabilities=cap_net_admin,cap_sys_ptrace,cap_dac_override=i
 SecureBits=keep-caps
 
 [Install]