diff options
author | Izorkin <izorkin@elven.pw> | 2020-03-23 12:23:50 +0300 |
---|---|---|
committer | Izorkin <izorkin@elven.pw> | 2020-03-23 12:24:49 +0300 |
commit | d508a2f366b2776a47333b35d034724b5de450da (patch) | |
tree | c7a4ea6e15da59b7f61e28a4f96f705c745ea0de /nixos/modules/services/monitoring/netdata.nix | |
parent | a3c769fef617eb47d0f2b6eaf552d5f17b889b2a (diff) | |
download | nixpkgs-d508a2f366b2776a47333b35d034724b5de450da.tar nixpkgs-d508a2f366b2776a47333b35d034724b5de450da.tar.gz nixpkgs-d508a2f366b2776a47333b35d034724b5de450da.tar.bz2 nixpkgs-d508a2f366b2776a47333b35d034724b5de450da.tar.lz nixpkgs-d508a2f366b2776a47333b35d034724b5de450da.tar.xz nixpkgs-d508a2f366b2776a47333b35d034724b5de450da.tar.zst nixpkgs-d508a2f366b2776a47333b35d034724b5de450da.zip |
nixos/netdata: fix permissions for perf.plugin
Diffstat (limited to 'nixos/modules/services/monitoring/netdata.nix')
-rw-r--r-- | nixos/modules/services/monitoring/netdata.nix | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/nixos/modules/services/monitoring/netdata.nix b/nixos/modules/services/monitoring/netdata.nix index 621d686512d..e43241eea89 100644 --- a/nixos/modules/services/monitoring/netdata.nix +++ b/nixos/modules/services/monitoring/netdata.nix @@ -9,6 +9,7 @@ let mkdir -p $out/libexec/netdata/plugins.d ln -s /run/wrappers/bin/apps.plugin $out/libexec/netdata/plugins.d/apps.plugin ln -s /run/wrappers/bin/freeipmi.plugin $out/libexec/netdata/plugins.d/freeipmi.plugin + ln -s /run/wrappers/bin/perf.plugin $out/libexec/netdata/plugins.d/perf.plugin ln -s /run/wrappers/bin/slabinfo.plugin $out/libexec/netdata/plugins.d/slabinfo.plugin ''; @@ -182,6 +183,14 @@ in { permissions = "u+rx,g+rx,o-rwx"; }; + security.wrappers."perf.plugin" = { + source = "${cfg.package}/libexec/netdata/plugins.d/perf.plugin.org"; + capabilities = "cap_sys_admin+ep"; + owner = cfg.user; + group = cfg.group; + permissions = "u+rx,g+rx,o-rx"; + }; + security.wrappers."slabinfo.plugin" = { source = "${cfg.package}/libexec/netdata/plugins.d/slabinfo.plugin.org"; capabilities = "cap_dac_override+ep"; |