Add AF_NETLINK to allowed address families for oxidized

[chef.git] / cookbooks / oxidized / recipes / default.rb

diff --git a/cookbooks/oxidized/recipes/default.rb b/cookbooks/oxidized/recipes/default.rb
index 28f65bf79badbbf3991587a7f35eb271263e8894..1840c2af3fcb9a4971fa2a6ced796b51fd440282 100644 (file)
--- a/cookbooks/oxidized/recipes/default.rb
+++ b/cookbooks/oxidized/recipes/default.rb
@@ -156,6 +156,7 @@ systemd_service "oxidized" do
               "OXIDIZED_LOGS" => "/var/log/oxidized"
   nice 10
   sandbox :enable_network => true
+  restrict_address_families "AF_NETLINK"
   read_write_paths ["/run/oxidized", "/var/lib/oxidized", "/var/log/oxidized"]
   restart "on-failure"
   notifies :restart, "service[oxidized]"