From 453c85ab624a35bb113e40068f57cabc67fd946a Mon Sep 17 00:00:00 2001 From: Ilho Kim Date: Mon, 30 May 2022 15:55:19 +0900 Subject: [PATCH] Add capabilities to pkg db recovery service This service can execute backend(tpk-backend,wgt-backend,unified-backend) so same capabilities is needed Change-Id: I8441449049658df805d39203c3d0d823e6704b7f Signed-off-by: Ilho Kim --- tool/pkg-db-recovery.service | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/tool/pkg-db-recovery.service b/tool/pkg-db-recovery.service index acf6da6..d26e37e 100644 --- a/tool/pkg-db-recovery.service +++ b/tool/pkg-db-recovery.service @@ -8,7 +8,9 @@ After=systemd-tmpfiles-setup.service local-fs.target [Service] Type=oneshot RemainAfterExit=yes -SmackProcessLabel=System +SmackProcessLabel=System::Privileged +Capabilities=cap_chown,cap_dac_override,cap_fowner,cap_mac_override=i +SecureBits=keep-caps ExecStart=/usr/bin/pkg-db-recovery [Install] -- 2.7.4