From: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu, 26 Mar 2026 14:14:06 +0000 (+0000)
Subject: priv: Don't drop CAP_SYS_RAWIO
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e0ff95fe68a04634ef291ffe03e3731b6d6e081f;p=telemetry.git

priv: Don't drop CAP_SYS_RAWIO

We require this for raw device access to read SMART data from disks.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/daemon/priv.c b/src/daemon/priv.c
index 963c3c1..c2d6273 100644
--- a/src/daemon/priv.c
+++ b/src/daemon/priv.c
@@ -85,6 +85,7 @@ static int td_priv_drop_capabilities(td_ctx* ctx) {
 		CAP_NET_ADMIN,
 		CAP_NET_RAW,
 		CAP_SYS_ADMIN,
+		CAP_SYS_RAWIO,
 		0,
 	};