Set the SMACK security label to run given executable file in systemd services

Change-Id: I53238494fd6a10928003a032035e5730240c5ca0
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>

diff --git a/systemd/cert-server.service.in b/systemd/cert-server.service.in
index afcbec0..6b2aeb5 100644 (file)
--- a/systemd/cert-server.service.in
+++ b/systemd/cert-server.service.in
@@ -5,4 +5,5 @@ Description=Start cert server for cert-svc managing root ssl certs
 ExecStart=@TZ_SYS_BIN@/cert-server
 User=security_fw
 Group=security_fw
+SmackProcessLabel=System
 Sockets=cert-server.socket