Add CAP_SYS_CHROOT for netdata service (#9726)
Vladimir Kobal committed
Aug 13, 2020 at 09:42 UTC
1d4c8a4821fc3af28947dd2bc517097446af8c51
1 file changed
+1
system/netdata.service.in
+1
@@ -53,6 +53,7 @@ CapabilityBoundingSet=CAP_SYS_ADMIN # is required for perf plugin
53
CapabilityBoundingSet=CAP_SYS_PTRACE # is required for apps plugin
54
CapabilityBoundingSet=CAP_SYS_RESOURCE # is required for ebpf plugin
55
CapabilityBoundingSet=CAP_NET_RAW # is required for fping app
56
+CapabilityBoundingSet=CAP_SYS_CHROOT # is required for cgroups plugin
57
58
# Sandboxing
59
ProtectSystem=full