From: Hyotaek Shim <hyotaek.shim@samsung.com>
Date: Tue, 25 Jul 2017 05:04:33 +0000 (+0900)
Subject: Remove cap_setgid capability from systemd-user-helper.
X-Git-Tag: submit/tizen/20170818.014207~3
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fchanges%2F51%2F140451%2F2;p=platform%2Fcore%2Fsystem%2Fsession-utils.git

Remove cap_setgid capability from systemd-user-helper.
Do not set others (cap_sys_admin,cap_mac_admin,cap_dac_override), which are already set by security-config

Change-Id: Ia33adac7081ad0ec8018d3f2842cf16f298b9ea4
Signed-off-by: Hyotaek Shim <hyotaek.shim@samsung.com>
---

diff --git a/packaging/session-utils.spec b/packaging/session-utils.spec
index 559c1d0..05dc6b3 100644
--- a/packaging/session-utils.spec
+++ b/packaging/session-utils.spec
@@ -31,7 +31,6 @@ rm -rf %{buildroot}
 %files
 %license LICENSE.Apache-2.0
 %manifest session-utils.manifest
-%caps(cap_sys_admin,cap_mac_admin,cap_dac_override,cap_setgid=ei) %{_bindir}/systemd-user-helper
 
 #TODO: when uninstalling, it should be restored to original file
 %posttrans