priv: Don't drop CAP_SYS_RAWIO

We require this for raw device access to read SMART data from disks.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/daemon/priv.c b/src/daemon/priv.c
index 963c3c1e3761a8884c9ccde32313b7f371b8911a..c2d6273c21f7da6f92933ae900426a9364ded3a9 100644 (file)
--- a/src/daemon/priv.c
+++ b/src/daemon/priv.c
@@ -85,6 +85,7 @@ static int td_priv_drop_capabilities(td_ctx* ctx) {
                CAP_NET_ADMIN,
                CAP_NET_RAW,
                CAP_SYS_ADMIN,
+               CAP_SYS_RAWIO,
                0,
        };