| # Copyright 2017 The Chromium OS Authors. All rights reserved. |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| description "ippusb manager daemon" |
| author "chromium-os-dev@chromium.org" |
| |
| # Start only on request. |
| start on socket PROTO=unix SOCKET_PATH=/run/ippusb/ippusb_manager.sock |
| |
| expect fork |
| |
| # Capabilities: CAP_SYS_ADMIN + CAP_SETUID + CAP_SETGID |
| # These capabilities are required since ippusb_manager is responsible for |
| # running the ippusbxd program within a minijail as well. |
| # TODO(valleau): Add pid namespace once this bug is fixed crbug.com/802889 |
| exec minijail0 -u "ippusb" -G \ |
| -S "/usr/share/policy/ippusb-manager-seccomp.policy" -n --uts \ |
| -c 0x2000c0 --ambient -e -i -l -r -t -v -- "/usr/bin/ippusb_manager" |
