summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJiung <jiung.yu@samsung.com>2017-10-24 14:32:06 +0900
committerJiung <jiung.yu@samsung.com>2017-10-24 14:32:39 +0900
commitef3acbafbed9f04abb95eb817313d388cb3e87aa (patch)
tree296a22a1a315c15df966873bca0e44c93582ffa5
parent9216c9c3a516bf42c6f2fdaf9f5836d5e2e8107b (diff)
downloadconnman-ef3acbafbed9f04abb95eb817313d388cb3e87aa.tar.gz
connman-ef3acbafbed9f04abb95eb817313d388cb3e87aa.tar.bz2
connman-ef3acbafbed9f04abb95eb817313d388cb3e87aa.zip
Add capabilities to run a charon IPsec daemon
Change-Id: If32cff2a0e60d7e50d2b4cd5669536267d4bef4c Signed-off-by: Yu jiung <jiung.yu@samsung.com>
-rwxr-xr-xsrc/connman.service.in2
-rwxr-xr-xvpn/connman-vpn.service.in2
2 files changed, 2 insertions, 2 deletions
diff --git a/src/connman.service.in b/src/connman.service.in
index cc964e25..de1b37dc 100755
--- a/src/connman.service.in
+++ b/src/connman.service.in
@@ -12,7 +12,7 @@ Restart=on-failure
SmackProcessLabel=System
ExecStart=@bindir@/connmand -n --noplugin vpn
StandardOutput=null
-Capabilities=cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw=i
+Capabilities=cap_setgid,cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw=i
SecureBits=keep-caps
[Install]
diff --git a/vpn/connman-vpn.service.in b/vpn/connman-vpn.service.in
index a4c294ec..32d2d142 100755
--- a/vpn/connman-vpn.service.in
+++ b/vpn/connman-vpn.service.in
@@ -11,7 +11,7 @@ BusName=net.connman.vpn
SmackProcessLabel=System
ExecStart=@bindir@/connman-vpnd -n
StandardOutput=null
-Capabilities=cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw=i
+Capabilities=cap_setgid,cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw=i
SecureBits=keep-caps
[Install]