From a46b566e5c4334f2dabf8b9b5e71ae4b37a1c115 Mon Sep 17 00:00:00 2001 From: Hyotaek Shim Date: Tue, 25 Jul 2017 14:04:33 +0900 Subject: [PATCH] Remove cap_setgid capability from systemd-user-helper. Do not set others (cap_sys_admin,cap_mac_admin,cap_dac_override), which are already set by security-config Change-Id: Ia33adac7081ad0ec8018d3f2842cf16f298b9ea4 Signed-off-by: Hyotaek Shim --- packaging/session-utils.spec | 1 - 1 file changed, 1 deletion(-) diff --git a/packaging/session-utils.spec b/packaging/session-utils.spec index 559c1d0..05dc6b3 100644 --- a/packaging/session-utils.spec +++ b/packaging/session-utils.spec @@ -31,7 +31,6 @@ rm -rf %{buildroot} %files %license LICENSE.Apache-2.0 %manifest session-utils.manifest -%caps(cap_sys_admin,cap_mac_admin,cap_dac_override,cap_setgid=ei) %{_bindir}/systemd-user-helper #TODO: when uninstalling, it should be restored to original file %posttrans -- 2.34.1