From 7538d7c07f735f0e6927c93b385b85593729d545 Mon Sep 17 00:00:00 2001 From: Derek Dai Date: Wed, 10 May 2017 13:30:26 +0800 Subject: [PATCH] miracle-dispd: reduce caps from .service file Change-Id: Ibfc14aca1c03b8cd6b50a49d5128da8597acb898 --- res/miracle-dispd.service.cmake | 4 ++++ res/miracle-dispd.service.in | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/res/miracle-dispd.service.cmake b/res/miracle-dispd.service.cmake index 58ac8e4..879387d 100644 --- a/res/miracle-dispd.service.cmake +++ b/res/miracle-dispd.service.cmake @@ -8,6 +8,10 @@ After=miracle-wifid.service BusName=org.freedesktop.miracle.wfd Environment=LOG_LEVEL=trace ExecStart=@CMAKE_INSTALL_PREFIX@/bin/miracle-dispd +CapabilityBoundingSet=CAP_NET_BIND_SERVICE \ + CAP_SETGID \ + CAP_SETUID \ + CAP_SETPCAP [Install] WantedBy=multi-user.target diff --git a/res/miracle-dispd.service.in b/res/miracle-dispd.service.in index 70cd953..e76edc7 100644 --- a/res/miracle-dispd.service.in +++ b/res/miracle-dispd.service.in @@ -8,6 +8,10 @@ After=miracle-wifid.service BusName=@dbus_name_prefix@.wfd Environment=LOG_LEVEL=trace ExecStart=@exec_path@/miracle-dispd +CapabilityBoundingSet=CAP_NET_BIND_SERVICE \ + CAP_SETGID \ + CAP_SETUID \ + CAP_SETPCAP [Install] WantedBy=multi-user.target