diff options
| -rw-r--r-- | debian/control | 2 | ||||
| -rw-r--r-- | debian/netdata.service | 3 |
2 files changed, 3 insertions, 2 deletions
diff --git a/debian/control b/debian/control index 69aff715c..dc56a260a 100644 --- a/debian/control +++ b/debian/control @@ -27,7 +27,7 @@ Depends: adduser, ${misc:Depends}, ${misc:Pre-Depends}, ${shlibs:Depends} -Recommends: nodejs +Recommends: nodejs, fping Description: real-time charts for system monitoring Netdata is a daemon that collects data in realtime (per second) and presents a web site to view and analyze them. The presentation diff --git a/debian/netdata.service b/debian/netdata.service index 8f2dfbbb2..3ad7c83d8 100644 --- a/debian/netdata.service +++ b/debian/netdata.service @@ -31,7 +31,8 @@ WorkingDirectory=/tmp NoNewPrivileges=false PermissionsStartOnly=true # CAP_SETGID is required for setgroups() -CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_SYS_PTRACE CAP_SETGID CAP_SETUID +# CAP_NET_RAW is needed by fping, see #864370 +CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_SYS_PTRACE CAP_SETGID CAP_SETUID CAP_NET_RAW PrivateTmp=true ProtectHome=read-only ProtectSystem=full |