From 15a52686f6b187f7cbd2bb48be7c8ae765060319 Mon Sep 17 00:00:00 2001
From: Sangyoon Jang <jeremy.jang@samsung.com>
Date: Wed, 2 Aug 2017 16:53:04 +0900
Subject: [PATCH] Fix capability of pkgmgr-server

pkgmgr-server will have capabilities only by inheritance.

Change-Id: Iafd97f7f6e5c31357e16ee3811e7415900017eaa
Signed-off-by: Sangyoon Jang <jeremy.jang@samsung.com>
---
 package-manager.service.in | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/package-manager.service.in b/package-manager.service.in
index 0bfb548..626604b 100644
--- a/package-manager.service.in
+++ b/package-manager.service.in
@@ -5,7 +5,6 @@ Description=Tizen Package Manager
 User=app_fw
 Group=app_fw
 SmackProcessLabel=System
-# CAP_DAC_OVERRIDE should be inheritable for using xdelta3
-Capabilities=cap_dac_override=i
+Capabilities=cap_chown,cap_dac_override,cap_fsetid,cap_kill,cap_setgid,cap_setuid=i
 SecureBits=keep-caps
 ExecStart=@PREFIX@/bin/pkgmgr-server
-- 
2.7.4