summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFederico Ceratto <federico.ceratto@gmail.com>2017-07-15 18:44:34 +0000
committerFederico Ceratto <federico.ceratto@gmail.com>2017-07-15 18:46:08 +0000
commit04a893f77854bc9f03cfd773d4f7600d40bba98b (patch)
tree2e9bd4d8cbce06cf4d74c282b4a2cc6ca9f54aaa
parentRelease v. 1.6.0+dfsg-2 to Unstable (diff)
downloadnetdata-04a893f77854bc9f03cfd773d4f7600d40bba98b.tar.xz
netdata-04a893f77854bc9f03cfd773d4f7600d40bba98b.zip
Add fping Recommends and CAP_NET_RAW capability
-rw-r--r--debian/control2
-rw-r--r--debian/netdata.service3
2 files changed, 3 insertions, 2 deletions
diff --git a/debian/control b/debian/control
index 69aff715c..dc56a260a 100644
--- a/debian/control
+++ b/debian/control
@@ -27,7 +27,7 @@ Depends: adduser,
${misc:Depends},
${misc:Pre-Depends},
${shlibs:Depends}
-Recommends: nodejs
+Recommends: nodejs, fping
Description: real-time charts for system monitoring
Netdata is a daemon that collects data in realtime (per second)
and presents a web site to view and analyze them. The presentation
diff --git a/debian/netdata.service b/debian/netdata.service
index 8f2dfbbb2..3ad7c83d8 100644
--- a/debian/netdata.service
+++ b/debian/netdata.service
@@ -31,7 +31,8 @@ WorkingDirectory=/tmp
NoNewPrivileges=false
PermissionsStartOnly=true
# CAP_SETGID is required for setgroups()
-CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_SYS_PTRACE CAP_SETGID CAP_SETUID
+# CAP_NET_RAW is needed by fping, see #864370
+CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_SYS_PTRACE CAP_SETGID CAP_SETUID CAP_NET_RAW
PrivateTmp=true
ProtectHome=read-only
ProtectSystem=full