public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

collectd service: removed insecure AmbientCapabilities

Browse Source
This commit is contained in:
Volth 2017-06-30 11:57:46 +00:00
parent 67340baa9b
commit a1212c7784
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
nixos/modules/services/monitoring/collectd.nix
View File

@ -87,7 +87,6 @@ in {
serviceConfig = { serviceConfig = {
ExecStart = "${cfg.package}/sbin/collectd -C ${conf} -f"; ExecStart = "${cfg.package}/sbin/collectd -C ${conf} -f";
User = cfg.user; User = cfg.user;
AmbientCapabilities = "cap_net_raw cap_dac_override"; # cap_net_raw for ping, cap_dac_override for smart
PermissionsStartOnly = true; PermissionsStartOnly = true;
}; };