# Copyright 2017 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

description "ippusb manager daemon"
author "chromium-os-dev@chromium.org"

# Start only on request.
start on socket PROTO=unix SOCKET_PATH=/run/ippusb/ippusb_manager.sock

expect fork

# Capabilities: CAP_SYS_ADMIN + CAP_SETUID + CAP_SETGID
# These capabilities are required since ippusb_manager is responsible for
# running the ippusbxd program within a minijail as well.
# TODO(valleau): Add pid namespace once this bug is fixed crbug.com/802889
exec minijail0 -u "ippusb" -G -c 0x2000c0 --ambient -e -i -l -r -t -v -- \
    "/usr/bin/ippusb_manager"