nixos/netdata: change wrappers permissions
This commit is contained in:
parent
859633ee43
commit
85914bc01d
@ -216,7 +216,7 @@ in {
|
|||||||
capabilities = "cap_dac_read_search,cap_sys_ptrace+ep";
|
capabilities = "cap_dac_read_search,cap_sys_ptrace+ep";
|
||||||
owner = cfg.user;
|
owner = cfg.user;
|
||||||
group = cfg.group;
|
group = cfg.group;
|
||||||
permissions = "u+rx,g+rx,o-rwx";
|
permissions = "u+rx,g+x,o-rwx";
|
||||||
};
|
};
|
||||||
|
|
||||||
security.wrappers."cgroup-network" = {
|
security.wrappers."cgroup-network" = {
|
||||||
@ -224,7 +224,7 @@ in {
|
|||||||
capabilities = "cap_setuid+ep";
|
capabilities = "cap_setuid+ep";
|
||||||
owner = cfg.user;
|
owner = cfg.user;
|
||||||
group = cfg.group;
|
group = cfg.group;
|
||||||
permissions = "u+rx,g+rx,o-rwx";
|
permissions = "u+rx,g+x,o-rwx";
|
||||||
};
|
};
|
||||||
|
|
||||||
security.wrappers."freeipmi.plugin" = {
|
security.wrappers."freeipmi.plugin" = {
|
||||||
@ -232,7 +232,7 @@ in {
|
|||||||
capabilities = "cap_dac_override,cap_fowner+ep";
|
capabilities = "cap_dac_override,cap_fowner+ep";
|
||||||
owner = cfg.user;
|
owner = cfg.user;
|
||||||
group = cfg.group;
|
group = cfg.group;
|
||||||
permissions = "u+rx,g+rx,o-rwx";
|
permissions = "u+rx,g+x,o-rwx";
|
||||||
};
|
};
|
||||||
|
|
||||||
security.wrappers."perf.plugin" = {
|
security.wrappers."perf.plugin" = {
|
||||||
@ -240,7 +240,7 @@ in {
|
|||||||
capabilities = "cap_sys_admin+ep";
|
capabilities = "cap_sys_admin+ep";
|
||||||
owner = cfg.user;
|
owner = cfg.user;
|
||||||
group = cfg.group;
|
group = cfg.group;
|
||||||
permissions = "u+rx,g+rx,o-rx";
|
permissions = "u+rx,g+x,o-rwx";
|
||||||
};
|
};
|
||||||
|
|
||||||
security.wrappers."slabinfo.plugin" = {
|
security.wrappers."slabinfo.plugin" = {
|
||||||
@ -248,7 +248,7 @@ in {
|
|||||||
capabilities = "cap_dac_override+ep";
|
capabilities = "cap_dac_override+ep";
|
||||||
owner = cfg.user;
|
owner = cfg.user;
|
||||||
group = cfg.group;
|
group = cfg.group;
|
||||||
permissions = "u+rx,g+rx,o-rx";
|
permissions = "u+rx,g+x,o-rwx";
|
||||||
};
|
};
|
||||||
|
|
||||||
security.pam.loginLimits = [
|
security.pam.loginLimits = [
|
||||||
|
Loading…
Reference in New Issue
Block a user