From 73a22feab0082a349ee8a17f76c23fc9eb348fa7 Mon Sep 17 00:00:00 2001 From: Seonah Moon Date: Tue, 22 Nov 2016 10:20:13 +0900 Subject: [PATCH] Add CapabilityBoundingSet Change-Id: Ida4f5cf865408942d45eac5985204c5ca332bbb3 Signed-off-by: Seonah Moon --- packaging/mobileap-agent.service | 2 ++ packaging/mobileap-agent.spec | 4 ++-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/packaging/mobileap-agent.service b/packaging/mobileap-agent.service index c80db3c..cee8875 100644 --- a/packaging/mobileap-agent.service +++ b/packaging/mobileap-agent.service @@ -8,5 +8,7 @@ Type=dbus BusName=org.tizen.MobileapAgent SmackProcessLabel=System ExecStart=/usr/bin/mobileap-agent +CapabilityBoundingSet=~CAP_MAC_ADMIN +CapabilityBoundingSet=~CAP_MAC_OVERRIDE Capabilities=cap_dac_override,cap_net_bind_service,cap_net_broadcast,cap_net_admin,cap_net_raw,cap_sys_admin=i SecureBits=keep-caps diff --git a/packaging/mobileap-agent.spec b/packaging/mobileap-agent.spec index 012a801..a9110a2 100644 --- a/packaging/mobileap-agent.spec +++ b/packaging/mobileap-agent.spec @@ -1,6 +1,6 @@ Name: mobileap-agent Summary: Mobile AP daemon for setting tethering environments -Version: 1.0.80 +Version: 1.0.81 Release: 1 Group: System/Network License: Apache-2.0 @@ -68,7 +68,7 @@ cp %{SOURCE2} %{buildroot}%{_datadir}/dbus-1/system-services/org.tizen.MobileapA %post /bin/chmod +x /opt/etc/dump.d/module.d/tethering_dump.sh -/usr/sbin/setcap cap_dac_override,cap_fowner,cap_net_bind_service,cap_net_admin+eip /usr/bin/mobileap-agent +#/usr/sbin/setcap cap_dac_override,cap_fowner,cap_net_bind_service,cap_net_admin+eip /usr/bin/mobileap-agent %files %manifest mobileap-agent.manifest -- 2.7.4