summaryrefslogtreecommitdiffstats
path: root/system
diff options
context:
space:
mode:
authorSteven Noonan <steven@uplinklabs.net>2022-02-28 04:23:51 -0800
committerGitHub <noreply@github.com>2022-02-28 07:23:51 -0500
commit83032fbfced0b971e2f27b746a3710ca82a121ed (patch)
tree16e96ff75d1b4e5264f668d4dffbd68c99ad3fca /system
parentebfaf8c0903c16cabd3ba76d4ca802c022ce9a29 (diff)
netdata.service: unbreak plugins that use sudo (#10201)
Signed-off-by: Steven Noonan <steven@uplinklabs.net>
Diffstat (limited to 'system')
-rw-r--r--system/netdata.service.in2
1 files changed, 2 insertions, 0 deletions
diff --git a/system/netdata.service.in b/system/netdata.service.in
index 291f4490ba..a34ea61dd0 100644
--- a/system/netdata.service.in
+++ b/system/netdata.service.in
@@ -64,6 +64,8 @@ CapabilityBoundingSet=CAP_NET_RAW
CapabilityBoundingSet=CAP_SYS_CHROOT
# is required for nfacct plugin (bandwidth accounting)
CapabilityBoundingSet=CAP_NET_ADMIN
+# is required for plugins that use sudo
+CapabilityBoundingSet=CAP_SETGID CAP_SETUID
# Sandboxing
ProtectSystem=full