From 588096c6b682ec467d85656abab65d77f74e5755 Mon Sep 17 00:00:00 2001 From: thiagoftsm Date: Mon, 15 May 2023 16:06:26 +0000 Subject: Debugfs collector (#15017) Co-authored-by: Fotis Voutsas Co-authored-by: Austin S. Hemmelgarn Co-authored-by: ilyam8 --- netdata-installer.sh | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) (limited to 'netdata-installer.sh') diff --git a/netdata-installer.sh b/netdata-installer.sh index af33126396..950901b024 100755 --- a/netdata-installer.sh +++ b/netdata-installer.sh @@ -1229,6 +1229,23 @@ if [ "$(id -u)" -eq 0 ]; then fi fi + if [ -f "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/debugfs.plugin" ]; then + run chown "root:${NETDATA_GROUP}" "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/debugfs.plugin" + capabilities=0 + if ! iscontainer && command -v setcap 1> /dev/null 2>&1; then + run chmod 0750 "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/debugfs.plugin" + if run setcap cap_dac_read_search+ep "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/debugfs.plugin"; then + # if we managed to setcap, but we fail to execute debugfs.plugin setuid to root + "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/debugfs.plugin" -t > /dev/null 2>&1 && capabilities=1 || capabilities=0 + fi + fi + + if [ $capabilities -eq 0 ]; then + # fix debugfs.plugin to be setuid to root + run chmod 4750 "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/debugfs.plugin" + fi + fi + if [ -f "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/freeipmi.plugin" ]; then run chown "root:${NETDATA_GROUP}" "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/freeipmi.plugin" run chmod 4750 "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/freeipmi.plugin" -- cgit v1.2.3