Fix capability of pkgmgr-server 08/142008/1
authorSangyoon Jang <jeremy.jang@samsung.com>
Wed, 2 Aug 2017 07:53:04 +0000 (16:53 +0900)
committerSangyoon Jang <jeremy.jang@samsung.com>
Wed, 2 Aug 2017 07:53:04 +0000 (16:53 +0900)
pkgmgr-server will have capabilities only by inheritance.

Change-Id: Iafd97f7f6e5c31357e16ee3811e7415900017eaa
Signed-off-by: Sangyoon Jang <jeremy.jang@samsung.com>
package-manager.service.in

index 0bfb548..626604b 100644 (file)
@@ -5,7 +5,6 @@ Description=Tizen Package Manager
 User=app_fw
 Group=app_fw
 SmackProcessLabel=System
-# CAP_DAC_OVERRIDE should be inheritable for using xdelta3
-Capabilities=cap_dac_override=i
+Capabilities=cap_chown,cap_dac_override,cap_fsetid,cap_kill,cap_setgid,cap_setuid=i
 SecureBits=keep-caps
 ExecStart=@PREFIX@/bin/pkgmgr-server