aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJosé Bollo <jose.bollo@iot.bzh>2016-02-11 16:41:57 +0100
committerJosé Bollo <jose.bollo@iot.bzh>2016-02-11 16:41:57 +0100
commita83d46af43d8327604f56aa6938626bfdc744d5d (patch)
treedc3dbaa6fa8a9ed65cfa948273c09591e9e35599
parent80babc1eba13df1c4ed257099b610be804e8fce5 (diff)
service :set the capabilities
Change-Id: I9722d6c6876fd872dccd9cb77f85b208c45e4b51 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
-rw-r--r--conf/afm-system-daemon.service3
1 files changed, 3 insertions, 0 deletions
diff --git a/conf/afm-system-daemon.service b/conf/afm-system-daemon.service
index 80c880f..b14f417 100644
--- a/conf/afm-system-daemon.service
+++ b/conf/afm-system-daemon.service
@@ -8,6 +8,9 @@ Group=afm
ExecStart=/usr/bin/afm-system-daemon
Restart=on-failure
RestartSec=5
+CapabilityBoundingSet=CAP_DAC_OVERRIDE CAP_MAC_OVERRIDE
+SecureBits=keep-caps
+Capabilities=cap_dac_override,cap_mac_override=i
[Install]
WantedBy=multi-user.target