From 83032fbfced0b971e2f27b746a3710ca82a121ed Mon Sep 17 00:00:00 2001 From: Steven Noonan Date: Mon, 28 Feb 2022 04:23:51 -0800 Subject: netdata.service: unbreak plugins that use sudo (#10201) Signed-off-by: Steven Noonan --- system/netdata.service.in | 2 ++ 1 file changed, 2 insertions(+) (limited to 'system') diff --git a/system/netdata.service.in b/system/netdata.service.in index 291f4490ba..a34ea61dd0 100644 --- a/system/netdata.service.in +++ b/system/netdata.service.in @@ -64,6 +64,8 @@ CapabilityBoundingSet=CAP_NET_RAW CapabilityBoundingSet=CAP_SYS_CHROOT # is required for nfacct plugin (bandwidth accounting) CapabilityBoundingSet=CAP_NET_ADMIN +# is required for plugins that use sudo +CapabilityBoundingSet=CAP_SETGID CAP_SETUID # Sandboxing ProtectSystem=full -- cgit v1.2.3