diff options
| -rw-r--r-- | debian/netdata-core.netdata.service | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/debian/netdata-core.netdata.service b/debian/netdata-core.netdata.service index e8d5df1d..e5e12427 100644 --- a/debian/netdata-core.netdata.service +++ b/debian/netdata-core.netdata.service @@ -31,7 +31,7 @@ NoNewPrivileges=false PermissionsStartOnly=true # CAP_SETGID is required for setgroups() # CAP_NET_RAW is needed by fping, see #864370 -CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_SYS_PTRACE CAP_SETGID CAP_SETUID CAP_NET_RAW +CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_SYS_PTRACE CAP_SETGID CAP_SETUID CAP_NET_RAW CAP_AUDIT_WRITE PrivateTmp=true ProtectHome=read-only ProtectSystem=full |