Age | Commit message (Collapse) | Author | Files | Lines |
|
It might be necessary to pass the address as an argument because
library systemd uses secure_getenv to retrieves the default
addresses and secure_getenv might return NULL in some cases.
Change-Id: Iea14a0494f39875f0a501e53a2711b0df96bab3c
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
|
|
The previous commit had CAP_DAC_OVERRIDE
instead of CAP_MAC_OVERRIDE.
Change-Id: I36988cd7771b6e25dbcf8d858ee3598bd12176b4
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
|
|
Since introduction of ambient capabilities,
systemd deprecated the use of Capabilities.
With systemd 229 activated with krogoth,
the use of Capabilities does nothing.
This commits avoids to use SecureBits and Capabilities.
It now relies on the fact that post installations are
setting the capabilities to the file:
- setcap cap_mac_override,cap_dac_override=ep afm-system-daemon
- setcap cap_mac_override,cap_mac_admin,cap_setgid=ep afm-user-daemon
Using p (permitted) instead of i (inherited) that was
previously used.
Change-Id: I17d51da07adf775d47a7f44551d8b8ebbc6eacb9
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
|
|
Change-Id: Icb4b6cd1612518dcf52ece7f1c762a18b1b7e2d4
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
|
|
This improves the user service definition
by setting its type to dbus.
It removes the group feature. Is it temporary?
Don't know it currently.
Change-Id: I9eb5751813d5d7e699c5502d6d6f810cea5f8473
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
|
|
Change-Id: Iaa1e43eb3eb84f7410d3bd5f352efee46a5591f4
|
|
Change-Id: I8a0d4c42d7fe02eabc06c91af9c488bb8235df4a
|