blob: 1a8fcc200826813a8f61a6d91426aaecc09b2abd [file] [log] [blame]
# Copyright 2017 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
description "ippusb manager daemon"
author ""
# Start only on request.
start on socket PROTO=unix SOCKET_PATH=/run/ippusb/ippusb_manager.sock
expect fork
# Capabilities: CAP_SYS_ADMIN
# This capability is required because ippusb_manager is responsible for
# launching ippusb_bridge within a minijail.
# TODO(valleau): Add pid namespace once this bug is fixed
exec minijail0 -u "ippusb" -g "ippusb" -G \
-S "/usr/share/policy/ippusb-manager-seccomp.policy" -n --uts \
-c cap_sys_admin=e --ambient -e -i -l -r -t -v -- "/usr/bin/ippusb_manager"