summaryrefslogtreecommitdiffstats
path: root/system/netdata.service.in
diff options
context:
space:
mode:
Diffstat (limited to 'system/netdata.service.in')
-rw-r--r--system/netdata.service.in4
1 files changed, 3 insertions, 1 deletions
diff --git a/system/netdata.service.in b/system/netdata.service.in
index 53dd9087f..291f4490b 100644
--- a/system/netdata.service.in
+++ b/system/netdata.service.in
@@ -53,7 +53,7 @@ CapabilityBoundingSet=CAP_FOWNER
# is required for apps, perf and slabinfo plugins
CapabilityBoundingSet=CAP_SETPCAP
# is required for perf plugin
-CapabilityBoundingSet=CAP_SYS_ADMIN
+CapabilityBoundingSet=CAP_SYS_ADMIN CAP_PERFMON
# is required for apps plugin
CapabilityBoundingSet=CAP_SYS_PTRACE
# is required for ebpf plugin
@@ -62,6 +62,8 @@ CapabilityBoundingSet=CAP_SYS_RESOURCE
CapabilityBoundingSet=CAP_NET_RAW
# is required for cgroups plugin
CapabilityBoundingSet=CAP_SYS_CHROOT
+# is required for nfacct plugin (bandwidth accounting)
+CapabilityBoundingSet=CAP_NET_ADMIN
# Sandboxing
ProtectSystem=full