Add mac override capability to package recovery service 83/275683/1
authorIlho Kim <ilho159.kim@samsung.com>
Mon, 30 May 2022 05:53:01 +0000 (14:53 +0900)
committerIlho Kim <ilho159.kim@samsung.com>
Mon, 30 May 2022 05:53:01 +0000 (14:53 +0900)
Change-Id: I450fdb7c8697a986b0db68cf5ea375265df38ab4
Signed-off-by: Ilho Kim <ilho159.kim@samsung.com>
src/pkg_recovery/package-recovery.service

index 00027fc..90b0aef 100644 (file)
@@ -8,7 +8,7 @@ Type=oneshot
 RemainAfterExit=yes
 User=app_fw
 Group=app_fw
-SmackProcessLabel=System
-Capabilities=cap_chown,cap_dac_override,cap_fowner=i
+SmackProcessLabel=System::Privileged
+Capabilities=cap_chown,cap_dac_override,cap_fowner,cap_mac_override=i
 SecureBits=keep-caps
 ExecStart=/usr/bin/pkg_recovery