From 7877a98bd9c00db5e81dd2f8c734cba2bab20be7 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Fri, 12 Aug 2022 09:26:17 +0200 Subject: Merging upstream version 1.36.0. Signed-off-by: Daniel Baumann --- system/netdata.service.in | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'system/netdata.service.in') diff --git a/system/netdata.service.in b/system/netdata.service.in index 1683a0a09..5affe4fef 100644 --- a/system/netdata.service.in +++ b/system/netdata.service.in @@ -43,7 +43,7 @@ CapabilityBoundingSet=CAP_DAC_OVERRIDE # is required for apps plugin CapabilityBoundingSet=CAP_DAC_READ_SEARCH # is required for freeipmi plugin -CapabilityBoundingSet=CAP_FOWNER +CapabilityBoundingSet=CAP_FOWNER CAP_SYS_RAWIO # is required for apps, perf and slabinfo plugins CapabilityBoundingSet=CAP_SETPCAP # is required for perf plugin @@ -66,7 +66,7 @@ ProtectSystem=full ProtectHome=read-only # PrivateTmp break netdatacli functionality. See - https://github.com/netdata/netdata/issues/7587 #PrivateTmp=true -ProtectControlGroups=true +ProtectControlGroups=on # We whitelist this because it's the standard location to listen on a UNIX socket. ReadWriteDirectories=/run/netdata # This is needed to make email-based alert deliver work if Postfix is the email provider on the system. -- cgit v1.2.3