From 72f98c00c468f34732c30ebbab885dee404d559a Mon Sep 17 00:00:00 2001 From: taesub kim Date: Mon, 27 Nov 2017 08:02:18 +0900 Subject: Added cap_dac_override capability Change-Id: I0c668091b85bf1f4f31ea2d1a9c6d53d73cd5736 Signed-off-by: Taesub Kim --- src/connman.service.in | 2 +- src/connman_tv.service.in | 2 +- vpn/connman-vpn.service.in | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/src/connman.service.in b/src/connman.service.in index de1b37dc..9eb75b24 100755 --- a/src/connman.service.in +++ b/src/connman.service.in @@ -12,7 +12,7 @@ Restart=on-failure SmackProcessLabel=System ExecStart=@bindir@/connmand -n --noplugin vpn StandardOutput=null -Capabilities=cap_setgid,cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw=i +Capabilities=cap_setgid,cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw,cap_dac_override=i SecureBits=keep-caps [Install] diff --git a/src/connman_tv.service.in b/src/connman_tv.service.in index cc964e25..9eb75b24 100644 --- a/src/connman_tv.service.in +++ b/src/connman_tv.service.in @@ -12,7 +12,7 @@ Restart=on-failure SmackProcessLabel=System ExecStart=@bindir@/connmand -n --noplugin vpn StandardOutput=null -Capabilities=cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw=i +Capabilities=cap_setgid,cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw,cap_dac_override=i SecureBits=keep-caps [Install] diff --git a/vpn/connman-vpn.service.in b/vpn/connman-vpn.service.in index 32d2d142..03eaf226 100755 --- a/vpn/connman-vpn.service.in +++ b/vpn/connman-vpn.service.in @@ -11,7 +11,7 @@ BusName=net.connman.vpn SmackProcessLabel=System ExecStart=@bindir@/connman-vpnd -n StandardOutput=null -Capabilities=cap_setgid,cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw=i +Capabilities=cap_setgid,cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw,cap_dac_override=i SecureBits=keep-caps [Install] -- cgit v1.2.3