Current service configuration for systemd causes errors on attempt to read /proc/self/io
.
At the same time other /proc/self/..
files can be accessed normally.
Temporary workaround can be to add:
CapabilityBoundingSet=CAP_DAC_READ_SEARCH
AmbientCapabilities=CAP_DAC_READ_SEARCH
Which will bypass permissions check and will make it succeed to read files.
It is needed to find a reason of this behaviour and fix that.