diff options
| author | Nataliia Solomko <natalirs1985@gmail.com> | 2026-07-02 11:46:45 +0300 |
|---|---|---|
| committer | Nataliia Solomko <natalirs1985@gmail.com> | 2026-07-02 15:34:17 +0300 |
| commit | f56f37924f05bcfebd05342ccb40c53001b3409a (patch) | |
| tree | 81d34c79d743cea47d827e4424ae9ac3182c0e97 /python | |
| parent | 063e007a5a8eac3bb9ad101206dc94734eeaa595 (diff) | |
| download | vyos-1x-f56f37924f05bcfebd05342ccb40c53001b3409a.tar.gz vyos-1x-f56f37924f05bcfebd05342ccb40c53001b3409a.zip | |
T9002: grant CAP_NET_RAW to blackbox-exporter when ICMP modules are configured
The blackbox-exporter runs as node_exporter user which cannot create
ICMP sockets due to restricted ping_group_range. Add CAP_NET_RAW
capability to the systemd service when ICMP modules are configured.
In non-VRF mode, use systemd AmbientCapabilities/CapabilityBoundingSet.
In VRF mode, replace runuser with setpriv to preserve the capability
across the UID change.
Diffstat (limited to 'python')
0 files changed, 0 insertions, 0 deletions