From 70ab19f224fecf8cd50ce1a42dae96c06889c94e Mon Sep 17 00:00:00 2001 From: "sangwan.kwon" Date: Fri, 18 Aug 2017 01:12:16 -0400 Subject: [PATCH] Fix csr-server capability as inheritable Change-Id: Ide4a5c8b6e5416671ad0ca6d54ee01ff2852bd9a Signed-off-by: sangwan.kwon --- systemd/csr.service.in | 2 ++ 1 file changed, 2 insertions(+) diff --git a/systemd/csr.service.in b/systemd/csr.service.in index 87f35fb..7fbf21d 100644 --- a/systemd/csr.service.in +++ b/systemd/csr.service.in @@ -6,6 +6,8 @@ Requires=@SERVICE_NAME@-cs.socket @SERVICE_NAME@-wp.socket @SERVICE_NAME@-admin. User=@SERVICE_USER@ Group=@SERVICE_GROUP@ SmackProcessLabel=@SMACK_DOMAIN_NAME@ +SecureBits=keep-caps +Capabilities=cap_dac_override,cap_fowner=i ExecStart=@BIN_DIR@/@SERVICE_NAME@-server Sockets=@SERVICE_NAME@-cs.socket Sockets=@SERVICE_NAME@-wp.socket -- 2.7.4