From bf62b1ba12ddb08e44afd08c479ff4b9f7995dcc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Patrick=20Schneewei=C3=9F?= Date: Thu, 4 Jan 2024 16:27:46 +0100 Subject: [PATCH] Add ambientcapability to service for dmesg --- roles/splunk/tasks/configure_systemd.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/roles/splunk/tasks/configure_systemd.yml b/roles/splunk/tasks/configure_systemd.yml index 21cb68cc..3c38f358 100644 --- a/roles/splunk/tasks/configure_systemd.yml +++ b/roles/splunk/tasks/configure_systemd.yml @@ -14,4 +14,6 @@ - { option: "LimitDATA", value: "infinity" } - { option: "LimitCORE", value: "infinity" } - { option: "TasksMax", value: "infinity" } + # Add Option for CAP_SYSLOG to read dmesg even with dmesg_restrict active + - { option: "AmbientCapabilities", value: "CAP_SYSLOG"} notify: reload systemctl daemon