summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rwxr-xr-xpackaging/connman.spec2
-rwxr-xr-xsrc/connman.service.in1
2 files changed, 3 insertions, 0 deletions
diff --git a/packaging/connman.spec b/packaging/connman.spec
index e2ef6316..3e7c99c3 100755
--- a/packaging/connman.spec
+++ b/packaging/connman.spec
@@ -174,6 +174,8 @@ cp vpn/vpn-dbus.conf %{buildroot}%{_sysconfdir}/dbus-1/system.d/connman-vpn-dbus
%endif
%post
+chsmack -a 'System' /%{_localstatedir}/lib/connman
+chsmack -a 'System' /%{_localstatedir}/lib/connman/settings
%preun
diff --git a/src/connman.service.in b/src/connman.service.in
index ae7cbea8..503ec455 100755
--- a/src/connman.service.in
+++ b/src/connman.service.in
@@ -10,6 +10,7 @@ Restart=on-failure
ExecStart=@sbindir@/connmand -n --noplugin vpn
StandardOutput=null
CapabilityBoundingSet=~CAP_MAC_ADMIN
+CapabilityBoundingSet=~CAP_MAC_OVERRIDE
[Install]
WantedBy=multi-user.target