That’s certainly the point.
- Can you edit
/etc/systemd/system/scrutiny-collector.service
and comment the 2 lines:
- CapabilityBoundingSet=~CAP_RAWIO CAP_MKNOD
- CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG
- execute
systemctl daemon-reload
- manually start the collector with
systemctl start scrutiny-collector.service
- check the log
/var/log/scrutiny/collector.log