Irqbalance / irqbalance

The irqbalance source tree - The new official site for irqbalance
http://irqbalance.github.io/irqbalance/
GNU General Public License v2.0
576 stars 139 forks source link

Add CAP_SETPCAP to CapabilityBoundingSet in irqbalance.service #328

Closed liutgnu closed 3 weeks ago

liutgnu commented 3 weeks ago

A error message of 'libcap-ng used by "/usr/sbin/irqbalance" failed dropping bounding set due to not having CAP_SETPCAP in capng_apply' is noticed.

Previously a similar issue1 has been fixed by the following commit:

efab272 Drop CapabilityBoundingSet from irqbalance service
43751df drop NoNewPrivs from irqbalance service

in which, CapabilityBoundingSet and NoNewPrivs parameters are dropped from the irqbalance.service, and get restored by the following commit later:

a99b604 Set additional systemd options for service

So this patch will not do the dropping again, but add CAP_SETPCAP to CapabilityBoundingSet instead.