collectd service: removed insecure AmbientCapabilities

2017-06-30 11:57:46 +00:00 · 2017-06-30 11:57:46 +00:00 · a1212c7784
parent 67340baa9b
commit a1212c7784
1 changed files with 0 additions and 1 deletions
--- a/nixos/modules/services/monitoring/collectd.nix
+++ b/nixos/modules/services/monitoring/collectd.nix
@ -87,7 +87,6 @@ in {
      serviceConfig = {
        ExecStart = "${cfg.package}/sbin/collectd -C ${conf} -f";
        User = cfg.user;
-        AmbientCapabilities = "cap_net_raw cap_dac_override"; # cap_net_raw for ping, cap_dac_override for smart
        PermissionsStartOnly = true;
      };