diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2023-07-20 04:49:55 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2023-07-20 04:49:55 +0000 |
| commit | ab1bb5b7f1c3c3a7b240ab7fc8661459ecd7decb (patch) | |
| tree | 7a900833aad3ccc685712c6c2a7d87576d54f427 /system/systemd/netdata.service.in | |
| parent | Adding upstream version 1.40.1. (diff) | |
| download | netdata-ab1bb5b7f1c3c3a7b240ab7fc8661459ecd7decb.tar.xz netdata-ab1bb5b7f1c3c3a7b240ab7fc8661459ecd7decb.zip | |
Adding upstream version 1.41.0.upstream/1.41.0
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'system/systemd/netdata.service.in')
| -rw-r--r-- | system/systemd/netdata.service.in | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/system/systemd/netdata.service.in b/system/systemd/netdata.service.in index 25d95b2b8..afdac114c 100644 --- a/system/systemd/netdata.service.in +++ b/system/systemd/netdata.service.in @@ -7,8 +7,7 @@ After=network.target httpd.service squid.service nfs-server.service mysqld.servi [Service] Type=simple -User=@netdata_user_POST@ -Group=netdata +User=root RuntimeDirectory=netdata RuntimeDirectoryMode=0775 PIDFile=/run/netdata/netdata.pid @@ -60,6 +59,8 @@ CapabilityBoundingSet=CAP_SYS_CHROOT CapabilityBoundingSet=CAP_NET_ADMIN # is required for plugins that use sudo CapabilityBoundingSet=CAP_SETGID CAP_SETUID +# is required to change file ownership +CapabilityBoundingSet=CAP_CHOWN # Sandboxing ProtectSystem=full |