From: Woongsuk Cho <ws77.cho@samsung.com>
Date: Wed, 6 Nov 2019 06:36:08 +0000 (+0900)
Subject: Add capability to dotnet-hydra-launcher
X-Git-Tag: submit/tizen/20191106.083239^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fchanges%2F82%2F217082%2F2;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git

Add capability to dotnet-hydra-launcher

Change-Id: I0ecab62e91bc1259517e791c2bf725386cbf6e3c
---

diff --git a/config/set_capability b/config/set_capability
index 2635689..e7e595d 100755
--- a/config/set_capability
+++ b/config/set_capability
@@ -445,6 +445,16 @@ if [ -e "/usr/bin/dotnet-launcher" ]
 then /usr/sbin/setcap cap_setgid,cap_sys_admin=ei /usr/bin/dotnet-launcher
 fi
 
+# Package               platform/core/dotnet/launcher
+# Owner                 Woongsuk Cho(ws77.cho@samsung.com)
+# Date                  November 6, 2019
+# Required              cap_sys_admin, cap_setgid
+# cap_setgid            to change app process gid
+# cap_sys_admin         to split mount namespace
+
+if [ -e "/usr/bin/dotnet-hydra-launcher" ]
+then /usr/sbin/setcap cap_setgid,cap_sys_admin=ei /usr/bin/dotnet-hydra-launcher
+
 # Package               platform/core/telephony/telephony-daemon
 # Owner                 Shinhui Kang(sinikang@samsung.com)
 # Date                  July 4, 2017