feat: adaptation of dbus security specifications

adaptation of dbus security specifications Log: adaptation of dbus security specifications
linuxdeepin · Dec 12, 2023 · f8f640d · f8f640d
1 parent 3f58bc7
commit f8f640d
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 2 deletions.
diff --git a/deepin-devicemanager-server/deepin-devicecontrol/CMakeLists.txt b/deepin-devicemanager-server/deepin-devicecontrol/CMakeLists.txt
@@ -80,3 +80,4 @@ install(TARGETS ${BIN_NAME} DESTINATION ${CMAKE_INSTALL_BINDIR})
 install(FILES ${BIN_NAME}.json DESTINATION share/deepin-service-manager/other/)
 install(FILES org.deepin.devicecontrol.conf DESTINATION share/dbus-1/system.d/)
 install(FILES org.deepin.DeviceControl.service DESTINATION share/dbus-1/system-services/)
+install(FILES deepin-devicecontrol.service DESTINATION lib/systemd/system/)
diff --git a/deepin-devicemanager-server/deepin-devicecontrol/deepin-devicecontrol.service b/deepin-devicemanager-server/deepin-devicecontrol/deepin-devicecontrol.service
@@ -0,0 +1,12 @@
+[Unit]
+Description=Deepin Device Control Daemon
+
+[Service]
+Type=dbus
+BusName=org.deepin.DeviceControl
+ExecStart=/usr/bin/deepin-devicecontrol
+CapabilityBoundingSet=~CAP_NET_RAW
+MemoryLimit=8G
+
+[Install]
+WantedBy=multi-user.target
diff --git a/deepin-devicemanager-server/deepin-devicecontrol/org.deepin.DeviceControl.service b/deepin-devicemanager-server/deepin-devicecontrol/org.deepin.DeviceControl.service
@@ -1,4 +1,4 @@
 [D-BUS Service]
 Name=org.deepin.DeviceControl
-Exec=/usr/bin/deepin-devicecontrol
-User=root
+Exec=/usr/bin/false
+SystemdService=deepin-devicecontrol.service