From f8f640da5276b8841933b140f6212b44a9abe0e7 Mon Sep 17 00:00:00 2001 From: fengli Date: Tue, 12 Dec 2023 16:04:36 +0800 Subject: [PATCH] feat: adaptation of dbus security specifications adaptation of dbus security specifications Log: adaptation of dbus security specifications --- .../deepin-devicecontrol/CMakeLists.txt | 1 + .../deepin-devicecontrol.service | 12 ++++++++++++ .../org.deepin.DeviceControl.service | 4 ++-- 3 files changed, 15 insertions(+), 2 deletions(-) create mode 100644 deepin-devicemanager-server/deepin-devicecontrol/deepin-devicecontrol.service diff --git a/deepin-devicemanager-server/deepin-devicecontrol/CMakeLists.txt b/deepin-devicemanager-server/deepin-devicecontrol/CMakeLists.txt index 0eba78d4..9d057586 100644 --- a/deepin-devicemanager-server/deepin-devicecontrol/CMakeLists.txt +++ b/deepin-devicemanager-server/deepin-devicecontrol/CMakeLists.txt @@ -80,3 +80,4 @@ install(TARGETS ${BIN_NAME} DESTINATION ${CMAKE_INSTALL_BINDIR}) install(FILES ${BIN_NAME}.json DESTINATION share/deepin-service-manager/other/) install(FILES org.deepin.devicecontrol.conf DESTINATION share/dbus-1/system.d/) install(FILES org.deepin.DeviceControl.service DESTINATION share/dbus-1/system-services/) +install(FILES deepin-devicecontrol.service DESTINATION lib/systemd/system/) diff --git a/deepin-devicemanager-server/deepin-devicecontrol/deepin-devicecontrol.service b/deepin-devicemanager-server/deepin-devicecontrol/deepin-devicecontrol.service new file mode 100644 index 00000000..25a1ec2e --- /dev/null +++ b/deepin-devicemanager-server/deepin-devicecontrol/deepin-devicecontrol.service @@ -0,0 +1,12 @@ +[Unit] +Description=Deepin Device Control Daemon + +[Service] +Type=dbus +BusName=org.deepin.DeviceControl +ExecStart=/usr/bin/deepin-devicecontrol +CapabilityBoundingSet=~CAP_NET_RAW +MemoryLimit=8G + +[Install] +WantedBy=multi-user.target diff --git a/deepin-devicemanager-server/deepin-devicecontrol/org.deepin.DeviceControl.service b/deepin-devicemanager-server/deepin-devicecontrol/org.deepin.DeviceControl.service index ae719828..5ded0919 100644 --- a/deepin-devicemanager-server/deepin-devicecontrol/org.deepin.DeviceControl.service +++ b/deepin-devicemanager-server/deepin-devicecontrol/org.deepin.DeviceControl.service @@ -1,4 +1,4 @@ [D-BUS Service] Name=org.deepin.DeviceControl -Exec=/usr/bin/deepin-devicecontrol -User=root +Exec=/usr/bin/false +SystemdService=deepin-devicecontrol.service