From 5e7db98f0b615daa88879dbe5eca09d69fd3dc56 Mon Sep 17 00:00:00 2001 From: Mateusz Moscicki Date: Fri, 6 Aug 2021 10:24:27 +0200 Subject: [PATCH] Change permissions with which the udev-trigger-dmbow@.service is started Change-Id: I2f0f383e4aff19e016fad410ab634f95b81e648e --- units/udev-trigger-dmbow@.service | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/units/udev-trigger-dmbow@.service b/units/udev-trigger-dmbow@.service index 294619f..85c92ef 100644 --- a/units/udev-trigger-dmbow@.service +++ b/units/udev-trigger-dmbow@.service @@ -14,4 +14,8 @@ ConditionPathExists=/dev/mapper/bowdev_%i [Service] SmackProcessLabel=System Type=oneshot +User=system_fw +Group=system_fw +Capabilities=cap_dac_override=i +SecureBits=keep-caps ExecStart=/usr/sbin/udevadm trigger -c change /dev/mapper/bowdev_%i -- 2.7.4