From: Tom Hughes <tom@compton.nu>
Date: Fri, 24 Feb 2023 14:26:25 +0000 (+0000)
Subject: Allow CAP_SYS_RAWIO for the ohai collector
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/c9efff70e1f693284bdf77927ac1a7a3b4546978

Allow CAP_SYS_RAWIO for the ohai collector
---

diff --git a/cookbooks/hardware/recipes/default.rb b/cookbooks/hardware/recipes/default.rb
index 72b405c3f..2af112479 100644
--- a/cookbooks/hardware/recipes/default.rb
+++ b/cookbooks/hardware/recipes/default.rb
@@ -702,7 +702,7 @@ prometheus_collector "ohai" do
   interval "15m"
   user "root"
   proc_subset "all"
-  capability_bounding_set %w[CAP_DAC_OVERRIDE CAP_SYS_ADMIN]
+  capability_bounding_set %w[CAP_DAC_OVERRIDE CAP_SYS_ADMIN CAP_SYS_RAWIO]
   private_devices false
   private_users false
   protect_clock false