From 2292e576096b80fead4e88d0c83f072f9e7c5f60 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Sat, 3 Dec 2022 17:10:42 +0000 Subject: [PATCH 1/1] Allow CAP_DAC_OVERRIDE for the ohai collector --- cookbooks/hardware/recipes/default.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cookbooks/hardware/recipes/default.rb b/cookbooks/hardware/recipes/default.rb index 3d1d8aa19..a62288f22 100644 --- a/cookbooks/hardware/recipes/default.rb +++ b/cookbooks/hardware/recipes/default.rb @@ -700,7 +700,7 @@ prometheus_collector "ohai" do interval "15m" user "root" proc_subset "all" - capability_bounding_set "CAP_SYS_ADMIN" + capability_bounding_set %w[CAP_SYS_ADMIN CAP_DAC_OVERRIDE] private_devices false private_users false protect_clock false -- 2.39.5