Set the SMACK security label to run given executable file in systemd services

Change-Id: Icafca25d7e5201bbc67e8e25e77ce6e9cd139acc
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>

diff --git a/packaging/bluetooth-hci-device.service b/packaging/bluetooth-hci-device.service
index e05228c..2b259e0 100644 (file)
--- a/packaging/bluetooth-hci-device.service
+++ b/packaging/bluetooth-hci-device.service
@@ -4,6 +4,7 @@ StopWhenUnneeded=yes
 
 [Service]
 Type=oneshot
+SmackProcessLabel=System
 ExecStart=/usr/etc/bluetooth/bt-dev-start.sh
 ExecStop=/usr/etc/bluetooth/bt-dev-end.sh
 RemainAfterExit=yes

diff --git a/packaging/bluetooth-hciattach@.service b/packaging/bluetooth-hciattach@.service
index 00ec9e9..9d49d09 100644 (file)
--- a/packaging/bluetooth-hciattach@.service
+++ b/packaging/bluetooth-hciattach@.service
@@ -5,6 +5,7 @@ After=bluetooth-hci-device.service
 
 [Service]
 Type=oneshot
+SmackProcessLabel=System
 ExecStartPre=-/bin/mkdir -p /run/bluetooth/
 ExecStart=/bin/touch /run/bluetooth/%I
 ExecStop=/bin/rm /run/bluetooth/%I