diff options
author | Izorkin <izorkin@elven.pw> | 2020-03-23 10:27:29 +0300 |
---|---|---|
committer | Izorkin <izorkin@elven.pw> | 2020-03-23 12:24:49 +0300 |
commit | a3c769fef617eb47d0f2b6eaf552d5f17b889b2a (patch) | |
tree | b394d310e2b5fab5f3d959494a31675567b096d2 /nixos/modules/services/monitoring/netdata.nix | |
parent | 50281a823f220f74da8ea693955e60f7224cf4d9 (diff) | |
download | nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.tar nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.tar.gz nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.tar.bz2 nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.tar.lz nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.tar.xz nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.tar.zst nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.zip |
nixos/netdata: fix permissions for slabinfo.plugin
Diffstat (limited to 'nixos/modules/services/monitoring/netdata.nix')
-rw-r--r-- | nixos/modules/services/monitoring/netdata.nix | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/nixos/modules/services/monitoring/netdata.nix b/nixos/modules/services/monitoring/netdata.nix index 7589fd0e67b..621d686512d 100644 --- a/nixos/modules/services/monitoring/netdata.nix +++ b/nixos/modules/services/monitoring/netdata.nix @@ -9,6 +9,7 @@ let mkdir -p $out/libexec/netdata/plugins.d ln -s /run/wrappers/bin/apps.plugin $out/libexec/netdata/plugins.d/apps.plugin ln -s /run/wrappers/bin/freeipmi.plugin $out/libexec/netdata/plugins.d/freeipmi.plugin + ln -s /run/wrappers/bin/slabinfo.plugin $out/libexec/netdata/plugins.d/slabinfo.plugin ''; plugins = [ @@ -181,6 +182,14 @@ in { permissions = "u+rx,g+rx,o-rwx"; }; + security.wrappers."slabinfo.plugin" = { + source = "${cfg.package}/libexec/netdata/plugins.d/slabinfo.plugin.org"; + capabilities = "cap_dac_override+ep"; + owner = cfg.user; + group = cfg.group; + permissions = "u+rx,g+rx,o-rx"; + }; + security.pam.loginLimits = [ { domain = "netdata"; type = "soft"; item = "nofile"; value = "10000"; } { domain = "netdata"; type = "hard"; item = "nofile"; value = "30000"; } |