From b40d4be356413f7e0eef24da51e3bf8ee3869713 Mon Sep 17 00:00:00 2001 From: Hyotaek Shim Date: Fri, 22 Dec 2017 16:13:03 +0900 Subject: [PATCH] Add Capabilities=cap_syslog=i for dlog_logger When CONFIG_SECURITY_DMESG_RESTRICT is enabled in the kernel(/dev/kmsg), CAP_SYSLOG is required for access. Change-Id: I65d6a682f25020ed34a1d0972551633d1b9f1730 Signed-off-by: Hyotaek Shim --- packaging/dlog_logger.service | 2 ++ 1 file changed, 2 insertions(+) diff --git a/packaging/dlog_logger.service b/packaging/dlog_logger.service index 404ea3b..96f7821 100644 --- a/packaging/dlog_logger.service +++ b/packaging/dlog_logger.service @@ -15,6 +15,8 @@ Group=log Environment=TZ=:/etc/localtime SmackProcessLabel=System ExecStart=/usr/bin/dlog_logger -b 99 -t 600 --no-drop-privileges +Capabilities=cap_syslog=i +SecureBits=keep-caps Restart=always [Install] -- 2.7.4