Allow CAP_SYS_RAWIO for the smart collector

diff --git a/cookbooks/hardware/recipes/default.rb b/cookbooks/hardware/recipes/default.rb
index 6095cceeb4f939c70fd311b6fe8c9e5954d991aa..3d1d8aa1986d2ea53842eb7a3c141bdda550883f 100644 (file)
--- a/cookbooks/hardware/recipes/default.rb
+++ b/cookbooks/hardware/recipes/default.rb
@@ -536,7 +536,7 @@ if disks.count.positive?
   prometheus_collector "smart" do
     interval "15m"
     user "root"
   prometheus_collector "smart" do
     interval "15m"
     user "root"

-    capability_bounding_set "CAP_SYS_ADMIN"
+    capability_bounding_set %w[CAP_SYS_ADMIN CAP_SYS_RAWIO]

     private_devices false
     private_users false
     protect_clock false
     private_devices false
     private_users false
     protect_clock false