netdata.service: unbreak plugins that use sudo (#10201)
Signed-off-by: Steven Noonan <steven@uplinklabs.net>
Steven Noonan committed
Feb 28, 2022 at 04:23 UTC
83032fbfced0b971e2f27b746a3710ca82a121ed
1 file changed
+2
system/netdata.service.in
+2
@@ -64,6 +64,8 @@ CapabilityBoundingSet=CAP_NET_RAW
64
CapabilityBoundingSet=CAP_SYS_CHROOT
65
# is required for nfacct plugin (bandwidth accounting)
66
CapabilityBoundingSet=CAP_NET_ADMIN
67
+# is required for plugins that use sudo
68
+CapabilityBoundingSet=CAP_SETGID CAP_SETUID
69
70
# Sandboxing
71
ProtectSystem=full