summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorIzorkin <izorkin@elven.pw>2020-03-23 10:27:29 +0300
committerIzorkin <izorkin@elven.pw>2020-03-23 12:24:49 +0300
commita3c769fef617eb47d0f2b6eaf552d5f17b889b2a (patch)
treeb394d310e2b5fab5f3d959494a31675567b096d2 /nixos
parent50281a823f220f74da8ea693955e60f7224cf4d9 (diff)
downloadnixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.tar
nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.tar.gz
nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.tar.bz2
nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.tar.lz
nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.tar.xz
nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.tar.zst
nixpkgs-a3c769fef617eb47d0f2b6eaf552d5f17b889b2a.zip
nixos/netdata: fix permissions for slabinfo.plugin
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/services/monitoring/netdata.nix9
1 files changed, 9 insertions, 0 deletions
diff --git a/nixos/modules/services/monitoring/netdata.nix b/nixos/modules/services/monitoring/netdata.nix
index 7589fd0e67b..621d686512d 100644
--- a/nixos/modules/services/monitoring/netdata.nix
+++ b/nixos/modules/services/monitoring/netdata.nix
@@ -9,6 +9,7 @@ let
     mkdir -p $out/libexec/netdata/plugins.d
     ln -s /run/wrappers/bin/apps.plugin $out/libexec/netdata/plugins.d/apps.plugin
     ln -s /run/wrappers/bin/freeipmi.plugin $out/libexec/netdata/plugins.d/freeipmi.plugin
+    ln -s /run/wrappers/bin/slabinfo.plugin $out/libexec/netdata/plugins.d/slabinfo.plugin
   '';
 
   plugins = [
@@ -181,6 +182,14 @@ in {
       permissions = "u+rx,g+rx,o-rwx";
     };
 
+    security.wrappers."slabinfo.plugin" = {
+      source = "${cfg.package}/libexec/netdata/plugins.d/slabinfo.plugin.org";
+      capabilities = "cap_dac_override+ep";
+      owner = cfg.user;
+      group = cfg.group;
+      permissions = "u+rx,g+rx,o-rx";
+    };
+
     security.pam.loginLimits = [
       { domain = "netdata"; type = "soft"; item = "nofile"; value = "10000"; }
       { domain = "netdata"; type = "hard"; item = "nofile"; value = "30000"; }