feat(packaging): add CAP_NET_RAW to go.d.plugin (#13909)
Ilya Mashchenko committed
Oct 31, 2022 at 16:39 UTC
df87a538cfaba5014a752937714756b7c5d30c93
4 files changed
+4
-4
contrib/debian/netdata.postinst
+1
-1
@@ -64,7 +64,7 @@ case "$1" in
64
fi
65
66
if [ -f "/usr/libexec/netdata/plugins.d/go.d.plugin" ]; then
67
- setcap cap_net_admin+epi /usr/libexec/netdata/plugins.d/go.d.plugin
67
+ setcap "cap_net_admin+epi cap_net_raw=eip" /usr/libexec/netdata/plugins.d/go.d.plugin
68
fi
69
70
chmod 4750 /usr/libexec/netdata/plugins.d/cgroup-network
netdata-installer.sh
+1
-1
@@ -1441,7 +1441,7 @@ install_go() {
1441
fi
1442
run chmod 0750 "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/go.d.plugin"
1443
if command -v setcap 1>/dev/null 2>&1; then
1444
- run setcap cap_net_admin+epi "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/go.d.plugin"
1444
+ run setcap "cap_net_admin+epi cap_net_raw=eip" "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/go.d.plugin"
1445
fi
1446
rm -rf "${tmp}"
1447
netdata.spec.in
+1
-1
@@ -516,7 +516,7 @@ rm -rf "${RPM_BUILD_ROOT}"
516
%attr(4750,root,netdata) %{_libexecdir}/%{name}/plugins.d/freeipmi.plugin
517
518
# go.d.plugin (the capability required for wireguard module)
519
-%caps(cap_net_admin=epi) %{_libexecdir}/%{name}/plugins.d/go.d.plugin
519
+%caps(cap_net_admin,cap_net_raw=eip) %{_libexecdir}/%{name}/plugins.d/go.d.plugin
520
521
# Enforce 0644 for files and 0755 for directories
522
# for the netdata web directory
packaging/makeself/install-or-update.sh
+1
-1
@@ -215,7 +215,7 @@ for x in apps.plugin freeipmi.plugin ioping cgroup-network ebpf.plugin perf.plug
215
done
216
217
if [ -f "usr/libexec/netdata/plugins.d/go.d.plugin" ] && command -v setcap 1>/dev/null 2>&1; then
218
- run setcap cap_net_admin+epi "usr/libexec/netdata/plugins.d/go.d.plugin"
218
+ run setcap "cap_net_admin+epi cap_net_raw=eip" "usr/libexec/netdata/plugins.d/go.d.plugin"
219
fi
220
221
# fix the fping binary