From: jin-gyu.kim <jin-gyu.kim@samsung.com>
Date: Fri, 10 Apr 2020 05:50:47 +0000 (+0900)
Subject: Add nan-manager.service
X-Git-Tag: submit/tizen/20200410.060235^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=d3f0f0ac32daebe80be7608152bcf4fe66d1c14a;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git

Add nan-manager.service

- network_fw / network_fw / System
- cap_net_admin & cap_net_raw are added.

Change-Id: Ib0d6f74ae772053642493bd6563f54f23887a919
---

diff --git a/config/set_capability b/config/set_capability
index 99cdafb..8170061 100755
--- a/config/set_capability
+++ b/config/set_capability
@@ -831,6 +831,16 @@ if [ -e "/usr/bin/clatd" ]
 then /usr/sbin/setcap cap_net_admin,cap_net_raw,cap_ipc_lock,cap_setuid,cap_setgid=ei /usr/bin/clatd
 fi
 
+# Package               platform/core/connectivity/nan-manager
+# Date                  Apr 10, 2020
+# Required              cap_net_admin,cap_net_raw
+# cap_net_admin		To add interface up/down and routing rules
+# cap_net_raw		To use raw socket
+
+if [ -e "/usr/bin/nan-manager" ]
+then /usr/sbin/setcap cap_net_admin,cap_net_raw=ei /usr/bin/nan-manager
+fi
+
 # TODO: MOVE TO OTHER SCRIPT OR REMOVE
 # Requested by sooyeon.kim@samsung.com (.voice) and dalton.lee@samsung.com (.multiassistant)
 dir_list=(".voice" ".multiassistant")
diff --git a/test/capability_test/new_capabilities_exception.list b/test/capability_test/new_capabilities_exception.list
index 5f49af8..47793f4 100755
--- a/test/capability_test/new_capabilities_exception.list
+++ b/test/capability_test/new_capabilities_exception.list
@@ -82,3 +82,4 @@
 /usr/bin/dotnet-hydra-launcher = cap_setgid,cap_sys_admin+ei
 /usr/bin/top = cap_sys_ptrace+ei
 /usr/bin/livedumper = cap_dac_override,cap_sys_ptrace+ei
+/usr/bin/nan-manager = cap_net_admin,cap_net_raw+ei
diff --git a/test/new_service_test/target/mobile/systemd_service.list b/test/new_service_test/target/mobile/systemd_service.list
index 0e8f122..b18dbce 100644
--- a/test/new_service_test/target/mobile/systemd_service.list
+++ b/test/new_service_test/target/mobile/systemd_service.list
@@ -103,6 +103,7 @@
 ;mtp-responder-dummy.service;network_fw;network_fw;System;
 ;murphyd.service;multimedia_fw;multimedia_fw;System;
 ;muse-server.service;multimedia_fw;multimedia_fw;System;
+;nan-manager.service;network_fw;network_fw;System;
 ;net-config.service;network_fw;network_fw;System;
 ;nether.service;security_fw;security_fw;System;
 ;nvitemd.service;telephony;telephony;System;
diff --git a/test/new_service_test/target/tv/systemd_service.list b/test/new_service_test/target/tv/systemd_service.list
index 2541c09..5c434df 100644
--- a/test/new_service_test/target/tv/systemd_service.list
+++ b/test/new_service_test/target/tv/systemd_service.list
@@ -84,6 +84,7 @@
 ;mtp-responder-dummy.service;network_fw;network_fw;System;
 ;murphyd.service;multimedia_fw;multimedia_fw;System;
 ;muse-server.service;multimedia_fw;multimedia_fw;System;
+;nan-manager.service;network_fw;network_fw;System;
 ;net-config.service;network_fw;network_fw;System;
 ;nether.service;security_fw;security_fw;System;
 ;ode.service;root;root;System::Privileged;
diff --git a/test/new_service_test/target/wearable/systemd_service.list b/test/new_service_test/target/wearable/systemd_service.list
index d987380..8373685 100755
--- a/test/new_service_test/target/wearable/systemd_service.list
+++ b/test/new_service_test/target/wearable/systemd_service.list
@@ -95,6 +95,7 @@
 ;mtp-responder-dummy.service;network_fw;network_fw;System;
 ;murphyd.service;multimedia_fw;multimedia_fw;System;
 ;muse-server.service;multimedia_fw;multimedia_fw;System;
+;nan-manager.service;network_fw;network_fw;System;
 ;net-config.service;network_fw;network_fw;System;
 ;nether.service;security_fw;security_fw;System;
 ;nfc-manager.service;network_fw;network_fw;System;