afm-unit.conf: Removes capabilities of applications

[src/app-framework-main.git] / conf / afm-unit-debug.conf.in

diff --git a/conf/afm-unit-debug.conf.in b/conf/afm-unit-debug.conf.in
index 57f934e..3ebcf1d 100644 (file)
--- a/conf/afm-unit-debug.conf.in
+++ b/conf/afm-unit-debug.conf.in
@@ -131,6 +131,10 @@ SuccessExitStatus=0 SIGKILL
 PAMName=su
 User=%i
 
+CapabilityBoundingSet=
+AmbientCapabilities=
+SecureBits=no-setuid-fixup-locked
+
 {{#required-permission}}
   {{#urn:AGL:permission::platform:no-oom}}      OOMScoreAdjust=-500             {{/urn:AGL:permission::platform:no-oom}}
   {{#urn:AGL:permission::partner:real-time}}    IOSchedulingClass=realtime      {{/urn:AGL:permission::partner:real-time}}