Fix sandboxing of smokeping exporter

[chef.git] / cookbooks / prometheus / recipes / smokeping.rb

diff --git a/cookbooks/prometheus/recipes/smokeping.rb b/cookbooks/prometheus/recipes/smokeping.rb
index 975f8a5c25be1bcb6c2d64029f7de0ac3f5002ef..5f11d2c90bf9c73d7315458802410ad2bd7fd5c3 100644 (file)
--- a/cookbooks/prometheus/recipes/smokeping.rb
+++ b/cookbooks/prometheus/recipes/smokeping.rb
@@ -40,4 +40,7 @@ end
 prometheus_exporter "smokeping" do
   port 9374
   options "--config.file=/etc/prometheus/exporters/smokeping.yml"
+  capability_bounding_set "CAP_NET_RAW"
+  ambient_capabilities "CAP_NET_RAW"
+  private_users false
 end