From 21579afefd3b98d0dd483b36a205e3c27f8c4d6e Mon Sep 17 00:00:00 2001 From: Konrad Kuchciak Date: Fri, 8 Nov 2019 11:13:19 +0100 Subject: [PATCH] Run as user with proper capabilities Change-Id: I786e71de5b82bb8ed03edc48e212e182809f36a1 --- config/stability-monitor.service | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/config/stability-monitor.service b/config/stability-monitor.service index a67b7ca..ef854ad 100644 --- a/config/stability-monitor.service +++ b/config/stability-monitor.service @@ -3,6 +3,10 @@ Description=Stability monitoring daemon [Service] Type=simple +User=stability_monitor +Group=stability_monitor +Capabilities=cap_sys_ptrace,cap_sys_module,cap_kill=i +SecureBits=keep-caps SmackProcessLabel=System ExecStart=/usr/sbin/stability-monitor Restart=on-failure -- 2.34.1