fix: [security] cancel cap_dac_read_search

cancel cap_dac_read_search Log: cancel cap_dac_read_search Bug: https://pms.uniontech.com/task-view-365257.html (cherry picked from commit 8aa68ab)
linuxdeepin · Nov 28, 2024 · 690ca13 · 690ca13
1 parent 4adfbef
commit 690ca13
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/debian/postinst b/debian/postinst
@@ -3,7 +3,7 @@ set -e
 
 if [ "$1" = configure ]; then
 	if command -v setcap >/dev/null; then
-		if setcap cap_net_raw,cap_dac_read_search+ep /usr/bin/deepin-system-monitor; then
+		if setcap cap_net_raw+ep /usr/bin/deepin-system-monitor; then
 			chmod u-s /usr/bin/deepin-system-monitor
 		else
 			echo "Setcap failed, falling back to setuid" >&2