From 4f8a20d93eb5533fab3c5a73c9b2f4e1aa3e2b99 Mon Sep 17 00:00:00 2001 From: cheoleun moon Date: Tue, 15 Nov 2016 17:51:10 -0800 Subject: [PATCH] Revert "Change attribute for daemon and set uid/gid into service" This reverts commit 9bb3678d0885d6766adbff4ea7c7bd38c6283817. Change-Id: Id2b191c3924f83247f49d541b26a51fef9f137b6 --- packaging/net-config.spec | 4 ++-- resources/usr/lib/systemd/system/net-config.service | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/packaging/net-config.spec b/packaging/net-config.spec index 01e01e9..f384165 100755 --- a/packaging/net-config.spec +++ b/packaging/net-config.spec @@ -147,8 +147,8 @@ ln -sf %{_unitdir}/net-config.service %{_sysconfdir}/systemd/default-extra-depen %files %manifest net-config.manifest -%attr(755,root,root) %{_sbindir}/* -%attr(644,network_fw,network_fw) %{_sysconfdir}/resolv.conf +%attr(500,root,root) %{_sbindir}/* +%attr(644,root,root) %{_sysconfdir}/resolv.conf %attr(644,root,root) %{_datadir}/dbus-1/system-services/* #DBus DAC %attr(644,root,root) %{_sysconfdir}/dbus-1/system.d/* diff --git a/resources/usr/lib/systemd/system/net-config.service b/resources/usr/lib/systemd/system/net-config.service index 4eccf02..26685b4 100755 --- a/resources/usr/lib/systemd/system/net-config.service +++ b/resources/usr/lib/systemd/system/net-config.service @@ -8,8 +8,8 @@ Type=forking SmackProcessLabel=System ExecStart=/usr/sbin/net-config Restart=always -User=network_fw -Group=network_fw +CapabilityBoundingSet=~CAP_MAC_ADMIN +CapabilityBoundingSet=~CAP_MAC_OVERRIDE [Install] WantedBy=multi-user.target -- 2.7.4