diff options
| author | Federico Ceratto <federico.ceratto@gmail.com> | 2017-07-15 18:44:34 +0000 |
|---|---|---|
| committer | Federico Ceratto <federico.ceratto@gmail.com> | 2017-07-15 18:46:08 +0000 |
| commit | 04a893f77854bc9f03cfd773d4f7600d40bba98b (patch) | |
| tree | 2e9bd4d8cbce06cf4d74c282b4a2cc6ca9f54aaa | |
| parent | Release v. 1.6.0+dfsg-2 to Unstable (diff) | |
| download | netdata-04a893f77854bc9f03cfd773d4f7600d40bba98b.tar.xz netdata-04a893f77854bc9f03cfd773d4f7600d40bba98b.zip | |
Add fping Recommends and CAP_NET_RAW capability
| -rw-r--r-- | debian/control | 2 | ||||
| -rw-r--r-- | debian/netdata.service | 3 |
2 files changed, 3 insertions, 2 deletions
diff --git a/debian/control b/debian/control index 69aff715..dc56a260 100644 --- a/debian/control +++ b/debian/control @@ -27,7 +27,7 @@ Depends: adduser, ${misc:Depends}, ${misc:Pre-Depends}, ${shlibs:Depends} -Recommends: nodejs +Recommends: nodejs, fping Description: real-time charts for system monitoring Netdata is a daemon that collects data in realtime (per second) and presents a web site to view and analyze them. The presentation diff --git a/debian/netdata.service b/debian/netdata.service index 8f2dfbbb..3ad7c83d 100644 --- a/debian/netdata.service +++ b/debian/netdata.service @@ -31,7 +31,8 @@ WorkingDirectory=/tmp NoNewPrivileges=false PermissionsStartOnly=true # CAP_SETGID is required for setgroups() -CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_SYS_PTRACE CAP_SETGID CAP_SETUID +# CAP_NET_RAW is needed by fping, see #864370 +CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_SYS_PTRACE CAP_SETGID CAP_SETUID CAP_NET_RAW PrivateTmp=true ProtectHome=read-only ProtectSystem=full |