From: Karol Lewandowski <k.lewandowsk@samsung.com>
Date: Thu, 12 Jun 2025 09:54:35 +0000 (+0200)
Subject: Reduce privileges of generate cache service
X-Git-Tag: accepted/tizen/unified/20250613.040703^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fheads%2Ftizen;p=platform%2Fcore%2Fsystem%2Fsessiond.git

Reduce privileges of generate cache service

root should not be needed accoring to dbus policy.

Change-Id: I2e0633b3108df5dcf5a711c76319e7ea2a919a78
---

diff --git a/packaging/sessiond.spec b/packaging/sessiond.spec
index 81788c0..6161dc1 100644
--- a/packaging/sessiond.spec
+++ b/packaging/sessiond.spec
@@ -2,7 +2,7 @@
 
 Name:       sessiond
 Summary:    Service to manage subsessions
-Version:    10.3.1
+Version:    10.3.2
 Release:    1
 Group:      System/Management
 License:    MIT
diff --git a/src/service/sessiond-generate-cache.service b/src/service/sessiond-generate-cache.service
index 66dacbc..324e4f0 100644
--- a/src/service/sessiond-generate-cache.service
+++ b/src/service/sessiond-generate-cache.service
@@ -3,8 +3,8 @@ Description=Regenerate sessiond cache
 
 [Service]
 Type=oneshot
-User=root
-Group=root
+User=system_fw
+Group=system_fw
 SmackProcessLabel=System
 ExecStart=/usr/bin/busctl call --expect-reply=no -- org.tizen.sessiond /org/tizen/sessiond org.tizen.sessiond.subsession.Manager GenerateCache "i" "1"