From be5601bfad0d9fd7303e502c60fecd4ed9cef0ce Mon Sep 17 00:00:00 2001 From: Saurav Babu Date: Fri, 17 Nov 2017 21:01:43 +0530 Subject: [PATCH] Make wmeshd can access sysfs without checking permission wmeshd creates socket and connects to hostapd, it fails when it is not root daemon. This patch makes wmeshd can bypass permission check. Change-Id: I3737b076bc746504102415cb4fd47f35311bc07e Signed-off-by: Saurav Babu --- packaging/wmeshd.service | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/packaging/wmeshd.service b/packaging/wmeshd.service index 85015d3..a6b044b 100644 --- a/packaging/wmeshd.service +++ b/packaging/wmeshd.service @@ -11,6 +11,5 @@ BusName=net.wmesh.manager SmackProcessLabel=System ExecStart=/usr/bin/wmeshd CapabilityBoundingSet=~CAP_MAC_ADMIN -CapabilityBoundingSet=~CAP_MAC_OVERRIDE -Capabilities=cap_net_admin,cap_net_raw=i +Capabilities=cap_net_admin,cap_net_raw,cap_dac_override=i SecureBits=keep-caps -- 2.7.4