From 277fa259c19836f94e9371bb0873f61673661908 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Thu, 29 Dec 2022 21:01:33 +0100
Subject: ...
---
hosts/vidhar/prometheus/default.nix | 1 +
1 file changed, 1 insertion(+)
diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix
index b188f7e6..c0d41743 100644
--- a/hosts/vidhar/prometheus/default.nix
+++ b/hosts/vidhar/prometheus/default.nix
@@ -401,6 +401,7 @@ in {
] ++ cfg.extraFlags)}";
ReadWritePaths = ["/run/dbus/system_bus_socket"];
BindReadOnlyPaths = ["/proc" "/sys"];
+ AmbientCapabilities = ["CAP_DAC_OVERRIDE"];
};
};
--
cgit v1.2.3