From 3263c277085f72ccf436b16df6f88ee72600db39 Mon Sep 17 00:00:00 2001 From: "joon.c.baek" Date: Tue, 19 Sep 2017 12:09:44 +0900 Subject: Assign capabilities 'cap_dac_override' to service 'cap_dac_override' capabilities used inteaded of root permission of sys-kernel-tracing.service. Change-Id: I71870eab4c2a32ac3a904f9713f0cb73a2295126 Signed-off-by: joon.c.baek --- packaging/sys-kernel-tracing.service | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/packaging/sys-kernel-tracing.service b/packaging/sys-kernel-tracing.service index 08b4335..ebecb7a 100644 --- a/packaging/sys-kernel-tracing.service +++ b/packaging/sys-kernel-tracing.service @@ -6,6 +6,10 @@ Before=tmp.mount systemd-tmpfiles-setup.service [Service] SmackProcessLabel=System +User=system_fw +Group=system_fw +SecureBits=keep-caps +Capabilities=cap_dac_override=i Type=oneshot RemainAfterExit=yes ExecStart=/bin/touch -f /sys/kernel/debug/tracing -- cgit v1.2.3