From c9efff70e1f693284bdf77927ac1a7a3b4546978 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Fri, 24 Feb 2023 14:26:25 +0000 Subject: [PATCH] Allow CAP_SYS_RAWIO for the ohai collector --- cookbooks/hardware/recipes/default.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cookbooks/hardware/recipes/default.rb b/cookbooks/hardware/recipes/default.rb index 72b405c3f..2af112479 100644 --- a/cookbooks/hardware/recipes/default.rb +++ b/cookbooks/hardware/recipes/default.rb @@ -702,7 +702,7 @@ prometheus_collector "ohai" do interval "15m" user "root" proc_subset "all" - capability_bounding_set %w[CAP_DAC_OVERRIDE CAP_SYS_ADMIN] + capability_bounding_set %w[CAP_DAC_OVERRIDE CAP_SYS_ADMIN CAP_SYS_RAWIO] private_devices false private_users false protect_clock false -- 2.39.5