nixos/logrotate: allow sending signal to arbitrary processes

Various postrotate scripts send e.g. SIGHUP to processes, to have them reload their config or reopen their logfile.
2025-02-23 04:25:14 +00:00 · 2024-09-30 13:30:38 +02:00 · 2024-09-30 13:30:38 +02:00 · 4ca03e3a11
commit 4ca03e3a11
parent 2dabc4fce1
1 changed files with 1 additions and 0 deletions
--- a/nixos/modules/services/logging/logrotate.nix
+++ b/nixos/modules/services/logging/logrotate.nix
@ -261,6 +261,7 @@ in
        CapabilityBoundingSet = [
          "CAP_CHOWN"
          "CAP_DAC_OVERRIDE"
+          "CAP_KILL"
          "CAP_SETUID"
          "CAP_SETGID"
        ];