From a1212c77849f11c7334647936a2621c558fd8b28 Mon Sep 17 00:00:00 2001 From: Volth Date: Fri, 30 Jun 2017 11:57:46 +0000 Subject: [PATCH] collectd service: removed insecure AmbientCapabilities --- nixos/modules/services/monitoring/collectd.nix | 1 - 1 file changed, 1 deletion(-) diff --git a/nixos/modules/services/monitoring/collectd.nix b/nixos/modules/services/monitoring/collectd.nix index eff1aecc910..dfbac3446e0 100644 --- a/nixos/modules/services/monitoring/collectd.nix +++ b/nixos/modules/services/monitoring/collectd.nix @@ -87,7 +87,6 @@ in { serviceConfig = { ExecStart = "${cfg.package}/sbin/collectd -C ${conf} -f"; User = cfg.user; - AmbientCapabilities = "cap_net_raw cap_dac_override"; # cap_net_raw for ping, cap_dac_override for smart PermissionsStartOnly = true; };