From 46b040d929269031fd178b8d4201366722e11711 Mon Sep 17 00:00:00 2001
From: Yunjin Lee <yunjin-.lee@samsung.com>
Date: Wed, 20 Jul 2016 21:31:32 +0900
Subject: [PATCH] Set SmackProcessLabel in service file according to the
 profile

Change-Id: I2228ad4a335ee9b06f0a2f088cec0bc6afaf0a9a
Signed-off-by: Yunjin Lee <yunjin-.lee@samsung.com>
---
 packaging/gumd.spec | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/packaging/gumd.spec b/packaging/gumd.spec
index 0a59e5c..40da7ea 100644
--- a/packaging/gumd.spec
+++ b/packaging/gumd.spec
@@ -89,6 +89,9 @@ cp -a %{SOURCE1001} %{name}.manifest
 cp -a %{SOURCE1002} libgum.manifest
 %if %{disable_cap_admin} == 1
 echo "CapabilityBoundingSet=~CAP_MAC_ADMIN" >> data/gumd.service
+echo "SmackProcessLabel=System" >> data/gumd.service
+%else
+echo "SmackProcessLabel=System::Privileged" >> data/gumd.service
 %endif
 
 %build
-- 
2.7.4