We have updated our Terms of Service, Code of Conduct, and Addendum.

Is there a way to run Edge as non-root while still being able to monitor all files?

Jon Rust
Jon Rust Posts: 418 mod
edited September 2023 in Edge

I really dislike running any service as root. But Edge needs to access files all over my system. Is there a way to address both requirements?

Tagged:

Best Answer

  • Jon Rust
    Jon Rust Posts: 418 mod
    Answer ✓

    You can set the CAP_DAC_READ_SEARCH ability as with allowing sub 1024 port numbers. Run systemctl edit cribl-edgeand add the CAP_DAC_READ_SEARCH capability. Save the file and restart Cribl Edge:

    [Service]
    AmbientCapabilities=CAP_DAC_READ_SEARCH

Answers