From: Dongwoo Lee <dwoo08.lee@samsung.com>
Date: Mon, 11 Sep 2023 10:38:22 +0000 (+0900)
Subject: pass: Add CAP_SYS_RESOURCE capability to allow write in psi nodes
X-Git-Tag: accepted/tizen/unified/20230912.171559^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fchanges%2F09%2F298609%2F1;p=platform%2Fcore%2Fsystem%2Fpass.git

pass: Add CAP_SYS_RESOURCE capability to allow write in psi nodes

Since linux kernel 5.13, CAP_SYS_RESOURCE is required to write in psi
nodes with unprivileged process. Thus this adds it to systemd service
file.

Change-Id: Ie8027e8f99aa616770eda9d0718604e2e0189041
Signed-off-by: Dongwoo Lee <dwoo08.lee@samsung.com>
---

diff --git a/systemd/pass.service.in b/systemd/pass.service.in
index 0324dec..39b24de 100644
--- a/systemd/pass.service.in
+++ b/systemd/pass.service.in
@@ -10,7 +10,7 @@ RestartSec=0
 KillSignal=SIGUSR1
 User=system_fw
 Group=system_fw
-Capabilities=cap_net_admin,cap_sys_ptrace,cap_dac_override=i
+Capabilities=cap_net_admin,cap_sys_ptrace,cap_dac_override,cap_sys_resource=i
 SecureBits=keep-caps
 
 [Install]