dom/telegraf
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Update sudo config recommendation (#5337)

Browse Source
This commit is contained in:
vignemail1
2019-01-24 19:54:25 +01:00
committed by Daniel Nelson
parent 35d18d3fd7
commit 7a229e25a6
7 changed files with 68 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
plugins/inputs/iptables/README.md
View File

@@ -28,10 +28,20 @@ Since telegraf will fork a process to run iptables, `AmbientCapabilities` is req
### Using sudo
You may edit your sudo configuration with the following:
You will need the following in your telegraf config:
```toml
[[inputs.iptables]]
use_sudo = true
```
```sudo
telegraf ALL=(root) NOPASSWD: /usr/bin/iptables -nvL *
You will also need to update your sudoers file:
```bash
$ visudo
# Add the following line:
Cmnd_Alias IPTABLESSHOW = /usr/bin/iptables -nvL *
telegraf ALL=(root) NOPASSWD: IPTABLESSHOW
Defaults!IPTABLESSHOW !logfile, !syslog, !pam_session
```
### Using IPtables lock feature