diff options
| author | Austin S. Hemmelgarn <austin@netdata.cloud> | 2021-03-12 09:23:57 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-03-12 09:23:57 -0500 |
| commit | 6fb4f28fbe23803fcf347c66090e06f625b24c9d (patch) | |
| tree | c5e28e424905a3dca8226576ad4bfe2504fee183 /netdata-installer.sh | |
| parent | fe0c96e1c392cf48d8ec51f49aaec659f1d2017d (diff) | |
Fixed handling of permissions for some plugins. (#10490)
* Removed pointless capabilities in our RPM spec file.
* Shifted slabinfo and perf plugins to use proper capabilties instead of
being SUID root.
Diffstat (limited to 'netdata-installer.sh')
| -rwxr-xr-x | netdata-installer.sh | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/netdata-installer.sh b/netdata-installer.sh index c11e1a7ec7..087868ca1a 100755 --- a/netdata-installer.sh +++ b/netdata-installer.sh @@ -1313,12 +1313,14 @@ if [ "${UID}" -eq 0 ]; then if [ -f "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/perf.plugin" ]; then run chown root:${NETDATA_GROUP} "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/perf.plugin" - run chmod 4750 "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/perf.plugin" + run chmod 0750 "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/perf.plugin" + run setcap cap_perfmon+ep "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/perf.plugin" fi if [ -f "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/slabinfo.plugin" ]; then run chown root:${NETDATA_GROUP} "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/slabinfo.plugin" - run chmod 4750 "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/slabinfo.plugin" + run chmod 0750 "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/slabinfo.plugin" + run setcap cap_dac_read_search+ep "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/slabinfo.plugin" fi if [ -f "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/ioping" ]; then |