Don't use FS namespaces for the agent

While they are a bit better security wise, it makes false vfs.fs.discovery results, including duplicated entries (for /tmp for example)
tags/zabbix-3.4.14-2
Daniel Berteaud 6 years ago
parent 1093150cf2
commit 574b2caacd
  1. 3
      zabbix-agent.service

@ -9,12 +9,9 @@ PIDFile=/var/run/zabbix/zabbix_agentd.pid
Restart=always Restart=always
User=zabbix User=zabbix
Group=zabbix Group=zabbix
PrivateTmp=yes
CPUShares=512 CPUShares=512
MemoryLimit=150M MemoryLimit=150M
BlockIOWeight=500 BlockIOWeight=500
InaccessibleDirectories=/home
ReadOnlyDirectories=/etc /usr
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

Loading…
Cancel
Save