| # Copyright 2017 The Chromium OS Authors. All rights reserved. |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| description "ippusb manager daemon" |
| author "chromium-os-dev@chromium.org" |
| |
| # Start only on request. |
| start on socket PROTO=unix SOCKET_PATH=/run/ippusb/ippusb_manager.sock |
| |
| expect fork |
| |
| # Capabilities: CAP_SYS_ADMIN + CAP_SETUID + CAP_SETGID |
| # These capabilities are required since ippusb_manager is responsible for |
| # running the ippusbxd program within a minijail as well. |
| # TODO(valleau): Add pid namespace once this bug is fixed crbug.com/802889 |
| exec minijail0 -u "ippusb" -G -c 0x2000c0 --ambient -e -i -l -r -t -v -- \ |
| "/usr/bin/ippusb_manager" |
