From a83d46af43d8327604f56aa6938626bfdc744d5d Mon Sep 17 00:00:00 2001
From: =?utf8?q?Jos=C3=A9=20Bollo?= <jose.bollo@iot.bzh>
Date: Thu, 11 Feb 2016 16:41:57 +0100
Subject: [PATCH] service :set the capabilities
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

Change-Id: I9722d6c6876fd872dccd9cb77f85b208c45e4b51
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
---
 conf/afm-system-daemon.service | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/conf/afm-system-daemon.service b/conf/afm-system-daemon.service
index 80c880f..b14f417 100644
--- a/conf/afm-system-daemon.service
+++ b/conf/afm-system-daemon.service
@@ -8,6 +8,9 @@ Group=afm
 ExecStart=/usr/bin/afm-system-daemon
 Restart=on-failure
 RestartSec=5
+CapabilityBoundingSet=CAP_DAC_OVERRIDE CAP_MAC_OVERRIDE
+SecureBits=keep-caps
+Capabilities=cap_dac_override,cap_mac_override=i
 
 [Install]
 WantedBy=multi-user.target
-- 
2.16.6