Set the SMACK security label to run given executable file in systemd services

Change-Id: If582a36ae44c0a2705dc8e28dc35bb907621ba2d
Signed-off-by: jongmyeongko <jongmyeong.ko@samsung.com>

diff --git a/plugin/app2sd/app2sd-server.service.in b/plugin/app2sd/app2sd-server.service.in
index 3389d63..a4a30cb 100644 (file)
--- a/plugin/app2sd/app2sd-server.service.in
+++ b/plugin/app2sd/app2sd-server.service.in
@@ -2,6 +2,7 @@
 Description=app2sd server
 
 [Service]
+SmackProcessLabel=User
 ExecStart=@PREFIX@/bin/app2sd-server
 CapabilityBoundingSet=~CAP_MAC_ADMIN
 CapabilityBoundingSet=~CAP_MAC_OVERRIDE