Change-Id: I45d4ae48d47d8690f41222df4d05c04cd241ce37
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
{{^urn:AGL:permission::partner:real-time}} RestrictRealtime=on {{/urn:AGL:permission::partner:real-time}}
{{#urn:AGL:permission::public:display}} SupplementaryGroups=display {{/urn:AGL:permission::public:display}}
{{^urn:AGL:permission::public:syscall:clock}} SystemCallFilter=~@clock {{/urn:AGL:permission::public:syscall:clock}}
{{^urn:AGL:permission::partner:real-time}} RestrictRealtime=on {{/urn:AGL:permission::partner:real-time}}
{{#urn:AGL:permission::public:display}} SupplementaryGroups=display {{/urn:AGL:permission::public:display}}
{{^urn:AGL:permission::public:syscall:clock}} SystemCallFilter=~@clock {{/urn:AGL:permission::public:syscall:clock}}
- {{^urn:AGL:permission::public:internet}} RestrictAddressFamilies=AF_UNIX {{/urn:AGL:permission::public:internet}}
{{/required-permission}}
%nl
{{/required-permission}}
%nl
ExecStart=/usr/bin/afb-daemon --port={{:#metadata.http-port}} --random-token \
--rootdir={{:#metadata.install-dir}} \
--workdir={{&#metadata.app-data-dir}}/{{id}} \
ExecStart=/usr/bin/afb-daemon --port={{:#metadata.http-port}} --random-token \
--rootdir={{:#metadata.install-dir}} \
--workdir={{&#metadata.app-data-dir}}/{{id}} \
+ {{#required-permission.urn:AGL:permission::public:no-htdocs}}\
+ --roothttp=. \
+ {{/required-permission.urn:AGL:permission::public:no-htdocs}}\
+ {{^required-permission.urn:AGL:permission::public:no-htdocs}}\
+ --roothttp=htdocs \
+ {{/required-permission.urn:AGL:permission::public:no-htdocs}}\
{{#required-permission.urn:AGL:permission::public:applications:read}}\
--alias=/icons:{{:#metadata.icons-dir}} \
{{/required-permission.urn:AGL:permission::public:applications:read}}\
{{#required-permission.urn:AGL:permission::public:applications:read}}\
--alias=/icons:{{:#metadata.icons-dir}} \
{{/required-permission.urn:AGL:permission::public:applications:read}}\
--rootdir={{:#metadata.install-dir}} \
--workdir={{&#metadata.install-dir}}/{{id}} \
{{^required-permission.urn:AGL:permission::partner:service:no-ws}}\
--rootdir={{:#metadata.install-dir}} \
--workdir={{&#metadata.install-dir}}/{{id}} \
{{^required-permission.urn:AGL:permission::partner:service:no-ws}}\
- --ws-server=unix:%t/bindings/{{:#target}} \
+ --ws-server=sd:{{:#target}} \
{{/required-permission.urn:AGL:permission::partner:service:no-ws}}\
{{^required-permission.urn:AGL:permission::partner:service:no-dbus}}\
--dbus-server={{:#target}} \
{{/required-permission.urn:AGL:permission::partner:service:no-dbus}}\
{{/required-permission.urn:AGL:permission::partner:service:no-ws}}\
{{^required-permission.urn:AGL:permission::partner:service:no-dbus}}\
--dbus-server={{:#target}} \
{{/required-permission.urn:AGL:permission::partner:service:no-dbus}}\
{{^required-permission.urn:AGL:permission::partner:service:no-ws}}
{{^required-permission.urn:AGL:permission::partner:service:no-ws}}
[socket]
SmackLabel=*
ListenStream=%t/bindings/{{:#target}}
[socket]
SmackLabel=*
ListenStream=%t/bindings/{{:#target}}
+FileDescriptorName={{:#target}}
{{/required-permission.urn:AGL:permission::partner:service:no-ws}}
{{/required-permission.urn:AGL:permission::partner:service:no-ws}}