Mirrors/Munin-Contrib
1
0
Fork 0
mirror of https://github.com/munin-monitoring/contrib.git synced 2025-07-22 02:51:03 +00:00
Code Issues Releases Wiki Activity

Plugin docker_: reduce permissions of plugin

Browse source 
root privileges are not required for sending queries to the docker socket.
Instead the group "docker" should be sufficient.

Additionally replace /var/run with /run (following updates of FHS).
This commit is contained in:
Lars Kruse 2021-02-23 00:10:10 +01:00
parent 807f15b931
commit 7ac850853d
1 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
plugins/docker/docker_
View file

@ -59,12 +59,15 @@ Would exclude all containers with the word "runner" in the name.
=over 2 =over 2
[docker_*] [docker_*]
user root group docker
env.DOCKER_HOST unix://var/run/docker.sock env.DOCKER_HOST unix://run/docker.sock
env.EXCLUDE_CONTAINER_NAME regexp env.EXCLUDE_CONTAINER_NAME regexp
=back =back
You may need to pick a different group depending on the name schema of your
distribution. Or maybe use "user root", if nothing else works.
=head1 AUTHORS =head1 AUTHORS
This section has been reverse-engineered from git logs This section has been reverse-engineered from git logs