diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2022-08-12 07:26:17 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2022-08-12 07:26:17 +0000 |
| commit | 7877a98bd9c00db5e81dd2f8c734cba2bab20be7 (patch) | |
| tree | d18b767250f7c7ced9b8abe2ece784ac1fe24d3e /system | |
| parent | Releasing debian version 1.35.1-2. (diff) | |
| download | netdata-7877a98bd9c00db5e81dd2f8c734cba2bab20be7.tar.xz netdata-7877a98bd9c00db5e81dd2f8c734cba2bab20be7.zip | |
Merging upstream version 1.36.0.
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'system')
| -rw-r--r-- | system/netdata.service.in | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/system/netdata.service.in b/system/netdata.service.in index 1683a0a0..5affe4fe 100644 --- a/system/netdata.service.in +++ b/system/netdata.service.in @@ -43,7 +43,7 @@ CapabilityBoundingSet=CAP_DAC_OVERRIDE # is required for apps plugin CapabilityBoundingSet=CAP_DAC_READ_SEARCH # is required for freeipmi plugin -CapabilityBoundingSet=CAP_FOWNER +CapabilityBoundingSet=CAP_FOWNER CAP_SYS_RAWIO # is required for apps, perf and slabinfo plugins CapabilityBoundingSet=CAP_SETPCAP # is required for perf plugin @@ -66,7 +66,7 @@ ProtectSystem=full ProtectHome=read-only # PrivateTmp break netdatacli functionality. See - https://github.com/netdata/netdata/issues/7587 #PrivateTmp=true -ProtectControlGroups=true +ProtectControlGroups=on # We whitelist this because it's the standard location to listen on a UNIX socket. ReadWriteDirectories=/run/netdata # This is needed to make email-based alert deliver work if Postfix is the email provider on the system. |