From 8796af3f9b41cc88eda446f1b004b60ab07027fa Mon Sep 17 00:00:00 2001 From: jooseong lee Date: Wed, 20 Jul 2016 19:50:43 +0900 Subject: [PATCH] Set the SMACK security label to run given executable file in systemd services Change-Id: Icafca25d7e5201bbc67e8e25e77ce6e9cd139acc Signed-off-by: jooseong lee --- packaging/bluetooth-hci-device.service | 1 + packaging/bluetooth-hciattach@.service | 1 + 2 files changed, 2 insertions(+) diff --git a/packaging/bluetooth-hci-device.service b/packaging/bluetooth-hci-device.service index e05228c..2b259e0 100644 --- a/packaging/bluetooth-hci-device.service +++ b/packaging/bluetooth-hci-device.service @@ -4,6 +4,7 @@ StopWhenUnneeded=yes [Service] Type=oneshot +SmackProcessLabel=System ExecStart=/usr/etc/bluetooth/bt-dev-start.sh ExecStop=/usr/etc/bluetooth/bt-dev-end.sh RemainAfterExit=yes diff --git a/packaging/bluetooth-hciattach@.service b/packaging/bluetooth-hciattach@.service index 00ec9e9..9d49d09 100644 --- a/packaging/bluetooth-hciattach@.service +++ b/packaging/bluetooth-hciattach@.service @@ -5,6 +5,7 @@ After=bluetooth-hci-device.service [Service] Type=oneshot +SmackProcessLabel=System ExecStartPre=-/bin/mkdir -p /run/bluetooth/ ExecStart=/bin/touch /run/bluetooth/%I ExecStop=/bin/rm /run/bluetooth/%I -- 2.7.4