That would only mask the problem, and miss the required chown and setcap
invocations.
The issue is caused by outdated references to /usr/lib/netdata/plugins.d
in the postinst script (and in the lintian overrides, but that's not
visible on install.) The correct fix would be something like this:
diff -Naur debian/netdata-core.postinst debian.new/netdata-core.postinst
--- debian/netdata-core.postinst 2024-08-26 11:15:21.000000000 +0300
+++ debian.new/netdata-core.postinst 2024-09-05 16:37:55.177233649 +0300
@@ -32,9 +32,9 @@
done
# handling plugin capabilities (or setuid as fallback)
- chown -R root:netdata /usr/lib/netdata/plugins.d
- setcap cap_dac_read_search,cap_sys_ptrace+ep
/usr/lib/netdata/plugins.d/apps.plugin || \
- chmod 4754 /usr/lib/netdata/plugins.d/apps.plugin
+ chown -R root:netdata /usr/libexec/netdata/plugins.d
+ setcap cap_dac_read_search,cap_sys_ptrace+ep
/usr/libexec/netdata/plugins.d/apps.plugin || \
+ chmod 4754
/usr/libexec/netdata/plugins.d/apps.plugin
# handling log owner and permissions
chown netdata:adm /var/log/netdata
and for the lintian overrides:
diff -Naur debian/netdata-core.lintian-overrides
debian.new/netdata-core.lintian-overrides
--- debian/netdata-core.lintian-overrides 2024-08-26
11:15:21.000000000 +0300
+++ debian.new/netdata-core.lintian-overrides 2024-09-05
16:39:03.141041458 +0300
@@ -1,10 +1,10 @@
# See Debian policy 10.9. apps.plugin has extra capabilities, so don't let
# normal users run it.
-netdata-core: non-standard-executable-perm
usr/lib/netdata/plugins.d/apps.plugin 0754 != 0755
+netdata-core: non-standard-executable-perm
usr/libexec/netdata/plugins.d/apps.plugin 0754 != 0755
# user created during install
netdata-core: maintainer-script-should-not-use-recursive-chown-or-chmod
# plugins that require root access
-netdata-core: setuid-binary usr/lib/netdata/plugins.d/freeipmi.plugin
4754 root/root
-netdata-core: setuid-binary usr/lib/netdata/plugins.d/perf.plugin 4754
root/root
+netdata-core: setuid-binary
usr/libexec/netdata/plugins.d/freeipmi.plugin 4754 root/root
+netdata-core: setuid-binary usr/libexec/netdata/plugins.d/perf.plugin
4754 root/root
