diff options
Diffstat (limited to 'system/netdata.service.in')
| -rw-r--r-- | system/netdata.service.in | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/system/netdata.service.in b/system/netdata.service.in index 1683a0a09..5affe4fef 100644 --- a/system/netdata.service.in +++ b/system/netdata.service.in @@ -43,7 +43,7 @@ CapabilityBoundingSet=CAP_DAC_OVERRIDE # is required for apps plugin CapabilityBoundingSet=CAP_DAC_READ_SEARCH # is required for freeipmi plugin -CapabilityBoundingSet=CAP_FOWNER +CapabilityBoundingSet=CAP_FOWNER CAP_SYS_RAWIO # is required for apps, perf and slabinfo plugins CapabilityBoundingSet=CAP_SETPCAP # is required for perf plugin @@ -66,7 +66,7 @@ ProtectSystem=full ProtectHome=read-only # PrivateTmp break netdatacli functionality. See - https://github.com/netdata/netdata/issues/7587 #PrivateTmp=true -ProtectControlGroups=true +ProtectControlGroups=on # We whitelist this because it's the standard location to listen on a UNIX socket. ReadWriteDirectories=/run/netdata # This is needed to make email-based alert deliver work if Postfix is the email provider on the system. |