From 2003744fcf5db01f67d3e3169e2dbb2a94875c61 Mon Sep 17 00:00:00 2001 From: SangYoun Kwak Date: Fri, 24 Jan 2025 14:57:32 +0900 Subject: [PATCH] Revert "Do not change ownership of the sockets" Since the security-config script limits installation of services and sockets which are not permitted in the systemd_socket.csv. In the systemd_socket.csv, sensord.socket is defined as below: * sensord.socket,sensor,input,0777,*,@,1,1,1,1,0,1,1,1,1,0 It means that sensord.socket should have socket user as "sensor" and socket group as "input". If this condition is not met, then the security-config script removes sensord.socket from the created image before image is successfully created. Due to this limitation, removing items "SocketUser" and "SocketGroup" will make the final image omits sensor.socket. To resolve this issue, removed items "SocketUser" and "SocketGroup" are restored. This reverts commit c723b7a2a6ccdf1b9dac7f6ed75f1074f99ad7ee. Change-Id: I930492377feb16874428184926559b50e08cc4d1 Signed-off-by: SangYoun Kwak --- packaging/sensord.socket | 2 ++ 1 file changed, 2 insertions(+) diff --git a/packaging/sensord.socket b/packaging/sensord.socket index ce2f0ce4..a64cd4b0 100644 --- a/packaging/sensord.socket +++ b/packaging/sensord.socket @@ -2,6 +2,8 @@ Description=Sensor socket [Socket] +SocketUser=sensor +SocketGroup=input ListenStream=/run/.sensord.socket SocketMode=0777 PassCredentials=yes -- 2.34.1