On Sep 30, 2012 3:25 PM, "Alex Efros" <[email protected]> wrote: > Is it possible to work around /proc/net restrictions to let conky access > network traffic stats without running `sudo conky` or disabling > CONFIG_GRKERNSEC_PROC_USER? Maybe using `setfacl` or something like that > to mark /usr/bin/conky allowed to access /proc/net?
Iirc there is a kernel setting that defines which group (gid) is exempt from this control. Perhaps you can use that and make the conky user part of that group? Wkr, Sven Vermeulen
