From b60923f63c04ee5206865f6534d3cbd11920e81d Mon Sep 17 00:00:00 2001 From: Konrad Kuchciak Date: Tue, 7 Nov 2017 12:08:37 +0100 Subject: Grant capabilities to perform factory reset Change-Id: Ib66debfc114f7f0a5f374791585955f55e5362e6 Signed-off-by: Konrad Kuchciak --- packaging/factory-reset.service | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/packaging/factory-reset.service b/packaging/factory-reset.service index ab6a4a4..97277f5 100644 --- a/packaging/factory-reset.service +++ b/packaging/factory-reset.service @@ -7,7 +7,8 @@ ConditionPathExists=|/opt/.factoryreset Type=oneshot ExecStartPre=/usr/bin/rm -f /opt/.factoryreset ExecStart=/usr/bin/factory-reset -SmackProcessLabel=System +SmackProcessLabel=System::Privileged +CapabilityBoundingSet=cap_dac_override cap_sys_admin cap_mac_override cap_mac_admin cap_sys_boot cap_chown cap_fowner [Install] WantedBy=multi-user.target -- cgit v1.2.3