From: José Bollo <jose.bollo@iot.bzh>
Date: Thu, 11 Feb 2016 15:41:57 +0000 (+0100)
Subject: service :set the capabilities
X-Git-Tag: 2.0.2~69
X-Git-Url: https://gerrit.automotivelinux.org/gerrit/gitweb?p=src%2Fapp-framework-main.git;a=commitdiff_plain;h=a83d46af43d8327604f56aa6938626bfdc744d5d

service :set the capabilities

Change-Id: I9722d6c6876fd872dccd9cb77f85b208c45e4b51
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
---

diff --git a/conf/afm-system-daemon.service b/conf/afm-system-daemon.service
index 80c880f..b14f417 100644
--- a/conf/afm-system-daemon.service
+++ b/conf/afm-system-daemon.service
@@ -8,6 +8,9 @@ Group=afm
 ExecStart=/usr/bin/afm-system-daemon
 Restart=on-failure
 RestartSec=5
+CapabilityBoundingSet=CAP_DAC_OVERRIDE CAP_MAC_OVERRIDE
+SecureBits=keep-caps
+Capabilities=cap_dac_override,cap_mac_override=i
 
 [Install]
 WantedBy=multi-user.target