summaryrefslogtreecommitdiffstats
path: root/system
diff options
context:
space:
mode:
Diffstat (limited to 'system')
-rw-r--r--system/netdata.service.in2
1 files changed, 2 insertions, 0 deletions
diff --git a/system/netdata.service.in b/system/netdata.service.in
index 291f4490ba..a34ea61dd0 100644
--- a/system/netdata.service.in
+++ b/system/netdata.service.in
@@ -64,6 +64,8 @@ CapabilityBoundingSet=CAP_NET_RAW
CapabilityBoundingSet=CAP_SYS_CHROOT
# is required for nfacct plugin (bandwidth accounting)
CapabilityBoundingSet=CAP_NET_ADMIN
+# is required for plugins that use sudo
+CapabilityBoundingSet=CAP_SETGID CAP_SETUID
# Sandboxing
ProtectSystem=full