X-Git-Url: https://git.verplant.org/?a=blobdiff_plain;f=contrib%2Fsystemd.collectd.service;h=6333d49a211ac63ff4d4291273d0f5073e5b7619;hb=b9fd6b6200e728249b88c8926c2fa53ad58c3935;hp=704c72af79ce5373172b38fdffd625826d8d5724;hpb=5d9fe94104f5c60ad3193b3a76deb4a0ea02d6c4;p=collectd.git

diff --git a/contrib/systemd.collectd.service b/contrib/systemd.collectd.service
index 704c72af..6333d49a 100644
--- a/contrib/systemd.collectd.service
+++ b/contrib/systemd.collectd.service
@@ -18,8 +18,10 @@ ProtectHome=true
 #   ceph            CAP_DAC_OVERRIDE
 #   dns             CAP_NET_RAW
 #   exec            CAP_SETUID CAP_SETGID
+#   intel_rdt       CAP_SYS_RAWIO
 #   iptables        CAP_NET_ADMIN
 #   ping            CAP_NET_RAW
+#   smart           CAP_SYS_RAWIO
 #   turbostat       CAP_SYS_RAWIO
 #
 # Example, if you use the iptables plugin alongside the dns or ping plugin:
@@ -28,13 +30,11 @@ ProtectHome=true
 # By default, drop all capabilities:
 CapabilityBoundingSet=
 
-NoNewPrivileges=true
-
-# Tell systemd it will receive a notification from collectd over it's control
+# Tell systemd it will receive a notification from collectd over its control
 # socket once the daemon is ready. See systemd.service(5) for more details.
 Type=notify
 
-# Restart the collectd daemon after a 10 seconds delay, in case it crashes.
+# Restart the collectd daemon when it fails.
 Restart=on-failure
 
 [Install]