From: jin-gyu.kim Date: Fri, 11 Dec 2020 06:00:35 +0000 (+0900) Subject: Give cap_kill to sdbd & sdbd-service. X-Git-Tag: submit/tizen/20201211.060439^0 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fchanges%2F96%2F249396%2F1;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git Give cap_kill to sdbd & sdbd-service. Change-Id: I68ec6f1d95857f797d582eabde9581165e944ce2 --- diff --git a/config/set_capability b/config/set_capability index 3283c51..2780e02 100755 --- a/config/set_capability +++ b/config/set_capability @@ -6,25 +6,27 @@ PATH=/bin:/usr/bin:/sbin:/usr/sbin # Owner Changseok Oh(seok.oh@samsung.com) # Date June 23, 2016 -# Required /usr/sbin/sdbd : cap_setuid, cap_setgid, cap_dac_override, cap_sys_admin : ei +# Required /usr/sbin/sdbd : cap_setuid, cap_setgid, cap_dac_override, cap_sys_admin, cap_kill : ei # cap_setuid set child process's uid to root # cap_dac_override bypass permission check at pull/push # cap_sys_admin remount at rpm installation +# cap_kill To send a signal to terminate a process if [ -e "/usr/sbin/sdbd" ] -then /usr/sbin/setcap cap_setuid,cap_setgid,cap_dac_override,cap_sys_admin=ei /usr/sbin/sdbd +then /usr/sbin/setcap cap_setuid,cap_setgid,cap_dac_override,cap_sys_admin,cap_kill=ei /usr/sbin/sdbd fi # Owner Manish Toshan Rathod(manish.r@samsung.com) # Date Sep 09, 2020 -# Required /usr/sbin/sdbd-service : cap_setuid, cap_setgid, cap_dac_override, cap_sys_admin : ei +# Required /usr/sbin/sdbd-service : cap_setuid, cap_setgid, cap_dac_override, cap_sys_admin, cap_kill : ei # To resolve sdbd stacking issue in emulator/target. The sdbd daemon will execute this new executable. # cap_setuid set child process's uid to root # cap_dac_override bypass permission check at pull/push # cap_sys_admin remount at rpm installation +# cap_kill To send a signal to terminate a process if [ -e "/usr/sbin/sdbd-service" ] -then /usr/sbin/setcap cap_setuid,cap_setgid,cap_dac_override,cap_sys_admin=ei /usr/sbin/sdbd-service +then /usr/sbin/setcap cap_setuid,cap_setgid,cap_dac_override,cap_sys_admin,cap_kill=ei /usr/sbin/sdbd-service fi # Package alarm-server