From 0475454f0df92b64713b744a9379fc6142f8438b Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Thu, 8 Dec 2022 11:23:52 +0000 Subject: [PATCH] Allow CAP_DAC_OVERRIDE for the smart collector --- cookbooks/hardware/recipes/default.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cookbooks/hardware/recipes/default.rb b/cookbooks/hardware/recipes/default.rb index 511e4d1cd..48e8f2888 100644 --- a/cookbooks/hardware/recipes/default.rb +++ b/cookbooks/hardware/recipes/default.rb @@ -538,7 +538,7 @@ if disks.count.positive? prometheus_collector "smart" do interval "15m" user "root" - capability_bounding_set %w[CAP_SYS_ADMIN CAP_SYS_RAWIO] + capability_bounding_set %w[CAP_DAC_OVERRIDE CAP_SYS_ADMIN CAP_SYS_RAWIO] private_devices false private_users false protect_clock false @@ -702,7 +702,7 @@ prometheus_collector "ohai" do interval "15m" user "root" proc_subset "all" - capability_bounding_set %w[CAP_SYS_ADMIN CAP_DAC_OVERRIDE] + capability_bounding_set %w[CAP_DAC_OVERRIDE CAP_SYS_ADMIN] private_devices false private_users false protect_clock false -- 2.43.2