Allow CAP_DAC_OVERRIDE for the smart collector

diff --git a/cookbooks/hardware/recipes/default.rb b/cookbooks/hardware/recipes/default.rb
index 511e4d1cdea6bf3a51bd7ae1ac98726b8a52b39d..48e8f28889d3286069cada8c68ce92bd47a7e213 100644 (file)
--- a/cookbooks/hardware/recipes/default.rb
+++ b/cookbooks/hardware/recipes/default.rb
@@ -538,7 +538,7 @@ if disks.count.positive?
   prometheus_collector "smart" do
     interval "15m"
     user "root"
-    capability_bounding_set %w[CAP_SYS_ADMIN CAP_SYS_RAWIO]
+    capability_bounding_set %w[CAP_DAC_OVERRIDE CAP_SYS_ADMIN CAP_SYS_RAWIO]
     private_devices false
     private_users false
     protect_clock false
@@ -702,7 +702,7 @@ prometheus_collector "ohai" do
   interval "15m"
   user "root"
   proc_subset "all"
-  capability_bounding_set %w[CAP_SYS_ADMIN CAP_DAC_OVERRIDE]
+  capability_bounding_set %w[CAP_DAC_OVERRIDE CAP_SYS_ADMIN]
   private_devices false
   private_users false
   protect_clock false