summaryrefslogtreecommitdiffstats
path: root/system/netdata.service.in
diff options
context:
space:
mode:
Diffstat (limited to 'system/netdata.service.in')
-rw-r--r--system/netdata.service.in4
1 files changed, 2 insertions, 2 deletions
diff --git a/system/netdata.service.in b/system/netdata.service.in
index 1683a0a09..5affe4fef 100644
--- a/system/netdata.service.in
+++ b/system/netdata.service.in
@@ -43,7 +43,7 @@ CapabilityBoundingSet=CAP_DAC_OVERRIDE
# is required for apps plugin
CapabilityBoundingSet=CAP_DAC_READ_SEARCH
# is required for freeipmi plugin
-CapabilityBoundingSet=CAP_FOWNER
+CapabilityBoundingSet=CAP_FOWNER CAP_SYS_RAWIO
# is required for apps, perf and slabinfo plugins
CapabilityBoundingSet=CAP_SETPCAP
# is required for perf plugin
@@ -66,7 +66,7 @@ ProtectSystem=full
ProtectHome=read-only
# PrivateTmp break netdatacli functionality. See - https://github.com/netdata/netdata/issues/7587
#PrivateTmp=true
-ProtectControlGroups=true
+ProtectControlGroups=on
# We whitelist this because it's the standard location to listen on a UNIX socket.
ReadWriteDirectories=/run/netdata
# This is needed to make email-based alert deliver work if Postfix is the email provider on the system.