From: Jin-gyu Kim Date: Mon, 3 May 2021 05:34:25 +0000 (+0900) Subject: Do not use rpm command in set_capability X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=aa9eba0fa639e7a281145779a15626323bbd070d;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git Do not use rpm command in set_capability "rpm" command cannot be existed in some cases. Instead of using it, check a specific file path to determine a certain rpm is installed or not. Change-Id: I6f5fda1cd35cac3bc039c5b4e008b28eafdeb1c1 --- diff --git a/config/set_capability b/config/set_capability index 56a5243..f9664ec 100755 --- a/config/set_capability +++ b/config/set_capability @@ -503,13 +503,15 @@ fi # cap_dac_override to access wayland and app socket, to check private sharing path # cap_sys_admin to use mount namespace -if [ -e "/usr/bin/amd" ] && [ "$(/usr/bin/rpm -qa | /usr/bin/grep amd-mod-launchpad)" == "" ] -then /usr/sbin/setcap cap_kill,cap_dac_override,cap_sys_admin=ei /usr/bin/amd -fi - -# This is needed for headless profile. -if [ -e "/usr/bin/amd" ] && [ "$(/usr/bin/rpm -qa | /usr/bin/grep amd-mod-launchpad)" != "" ] -then /usr/sbin/setcap cap_setuid,cap_setgid,cap_mac_admin,cap_kill,cap_dac_override,cap_sys_admin=ei /usr/bin/amd +if [ -e "/usr/bin/amd" ] +then + # This is needed for headless profile. + if [ -e "/usr/share/amd/mod/libamd-mod-launchpad.so" ] + then + /usr/sbin/setcap cap_setuid,cap_setgid,cap_mac_admin,cap_kill,cap_dac_override,cap_sys_admin=ei /usr/bin/amd + else + /usr/sbin/setcap cap_kill,cap_dac_override,cap_sys_admin=ei /usr/bin/amd + fi fi # Package platform/framework/web/crosswalk-tizen