diff options
| author |   José Bollo <jose.bollo@iot.bzh> | 2019-05-23 18:06:38 +0200 |
|---|---|---|
| committer |   Jan-Simon Moeller <jsmoeller@linuxfoundation.org> | 2019-06-19 13:05:28 +0000 |
| commit | bcd5334d789f61ac1f6b14de3f1f2febea27e06c (patch) | |
| tree | c8a2b4841dfe583670e8646bc7ec2d33309fe274 /meta-agl-profile-core | |
| parent | 4b0ef61b6ba59ca8a347453cbfdd159f2cf74f40 (diff) | |
lightmediascanner: change db directory
Lightmediascanner runs for one user and should not be able
to look over the the shoulder of other users. So it should
not run as root anymore.
At the moment, lightmediascanner is a user daemon started in the
user session by systemd, without capabilities but with the Smack
label "System".
To allow the service-mediascanner to access its database,
the db must be set in a specific place with the User::App-shared
label.
Bug-AGL: SPEC-1016
Change-Id: Id4546e2567c4f5a0a5139d274d35d11e4879e42e
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
Diffstat (limited to 'meta-agl-profile-core')
| -rw-r--r-- | meta-agl-profile-core/recipes-multimedia/lightmediascanner/files/lightmediascanner.service | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/meta-agl-profile-core/recipes-multimedia/lightmediascanner/files/lightmediascanner.service b/meta-agl-profile-core/recipes-multimedia/lightmediascanner/files/lightmediascanner.service index e53b24719..3b8a6d361 100644 --- a/meta-agl-profile-core/recipes-multimedia/lightmediascanner/files/lightmediascanner.service +++ b/meta-agl-profile-core/recipes-multimedia/lightmediascanner/files/lightmediascanner.service @@ -4,7 +4,8 @@ Description=Lightmediascanner (LMS) [Service] Type=dbus BusName=org.lightmediascanner -ExecStart=/usr/bin/lightmediascannerd --startup-scan --db-path=/tmp/%U/lightmediascannerd.db --directory=/media --directory=%h/Music --directory=%h/Videos +UMask=0077 +ExecStart=/usr/bin/lightmediascannerd --startup-scan --db-path=/run/user/%U/usrshr/lightmediascannerd.db --directory=/media --directory=%h/Music --directory=%h/Videos [Install] WantedBy=default.target |