CL-Softwares
/
telegraf
8
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Document using group membership to allow access to /dev/pf for pf input plugin (#9232)

This commit is contained in:
SomKen 2021-05-03 12:35:04 -07:00 committed by GitHub
parent 279dda21ef
commit 09faa32043
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
plugins/inputs/pf/README.md
View File

@ -7,6 +7,7 @@ The pf plugin retrieves this information by invoking the `pfstat` command. The `
* Run telegraf as root. This is strongly discouraged.
* Change the ownership and permissions for /dev/pf such that the user telegraf runs at can read the /dev/pf device file. This is probably not that good of an idea either.
* Configure sudo to grant telegraf to run `pfctl` as root. This is the most restrictive option, but require sudo setup.
* Add "telegraf" to the "proxy" group as /dev/pf is owned by root:proxy.
### Using sudo