From 93b984ca6c4a0c2281dbb41440e926b7fa79ba01 Mon Sep 17 00:00:00 2001 From: jongmyeongko Date: Thu, 21 Jul 2016 13:04:55 +0900 Subject: [PATCH] Set the SMACK security label to run given executable file in systemd services Change-Id: If582a36ae44c0a2705dc8e28dc35bb907621ba2d Signed-off-by: jongmyeongko --- plugin/app2sd/app2sd-server.service.in | 1 + 1 file changed, 1 insertion(+) diff --git a/plugin/app2sd/app2sd-server.service.in b/plugin/app2sd/app2sd-server.service.in index 3389d63..a4a30cb 100644 --- a/plugin/app2sd/app2sd-server.service.in +++ b/plugin/app2sd/app2sd-server.service.in @@ -2,6 +2,7 @@ Description=app2sd server [Service] +SmackProcessLabel=User ExecStart=@PREFIX@/bin/app2sd-server CapabilityBoundingSet=~CAP_MAC_ADMIN CapabilityBoundingSet=~CAP_MAC_OVERRIDE -- 2.7.4