From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <a_s_y@sama.ru>
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
 sa.local.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham
 autolearn_force=no version=3.4.1
From: Sergey <a_s_y@sama.ru>
To: ALT Linux Community general discussions <community@lists.altlinux.org>
Date: Fri, 18 Oct 2019 10:54:28 +0400
User-Agent: KMail/1.9.10 (enterprise35 0.20100827.1168748)
References: <201910172247.26116.a_s_y@sama.ru>
 <201910181041.15340.a_s_y@sama.ru> <20191018064949.GH7986@imap.altlinux.org>
In-Reply-To: <20191018064949.GH7986@imap.altlinux.org>
X-KMail-QuotePrefix: > 
MIME-Version: 1.0
Content-Type: Text/Plain;
  charset="utf-8"
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
Message-Id: <201910181054.28394.a_s_y@sama.ru>
Subject: Re: [Comm] =?utf-8?b?Y29sbGVjdGQg0Lgg0L/Qu9Cw0LPQuNC9IHBpbmc=?=
X-BeenThere: community@lists.altlinux.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: ALT Linux Community general discussions
 <community@lists.altlinux.org>
List-Id: ALT Linux Community general discussions <community.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/options/community>,
 <mailto:community-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/community>
List-Post: <mailto:community@lists.altlinux.org>
List-Help: <mailto:community-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
 <mailto:community-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Oct 2019 06:54:35 -0000
Archived-At: <http://lore.altlinux.org/community/201910181054.28394.a_s_y@sama.ru/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>

On Friday 18 October 2019, Michael Shigorin wrote:

> > Сам systemd как-то может влиять?
> 
> Например, загнать процесс в mount namespace.
 
Блин, в collectd.service даже написано:

# A few plugins won't work without some privileges, which you'll have to
# specify using the CapabilityBoundingSet directive below.
#
# Here's a (incomplete) list of the plugins known capability requirements:
#   ceph            CAP_DAC_OVERRIDE
#   dns             CAP_NET_RAW
#   exec            CAP_SETUID CAP_SETGID
#   intel_rdt       CAP_SYS_RAWIO
#   intel_pmu       CAP_SYS_ADMIN
#   iptables        CAP_NET_ADMIN
#   ping            CAP_NET_RAW
#   processes       CAP_NET_ADMIN  (CollectDelayAccounting only)
#   smart           CAP_SYS_RAWIO
#   turbostat       CAP_SYS_RAWIO
#
# Example, if you use the iptables plugin alongside the dns or ping plugin:
#CapabilityBoundingSet=CAP_NET_RAW CAP_NET_ADMIN

А теперь интересное. collectd.service лежит в /lib/systemd/system/.
Вопрос на засыпку, это конфиг, или оно обновится при обновлении пакета?
В спеке %_unitdir/collectd.service без %config(noreplace).

-- 
С уважением, Сергей.