diff --git a/audit/internal/webui/server.go b/audit/internal/webui/server.go
index 7ea24a0..cb34b30 100644
--- a/audit/internal/webui/server.go
+++ b/audit/internal/webui/server.go
@@ -625,7 +625,7 @@ func renderChartSVG(title string, datasets [][]float64, names []string, labels [
 	opt := gocharts.NewLineChartOptionWithData(datasets)
 	opt.Title = gocharts.TitleOption{Text: title}
 	opt.XAxis.Labels = sparse
-	opt.Legend = gocharts.LegendOption{SeriesNames: names}
+	opt.Legend = gocharts.LegendOption{SeriesNames: names, Show: gocharts.Ptr(false)}
 	if yMin != nil || yMax != nil {
 		opt.YAxis = []gocharts.YAxisOption{{
 			Min:            yMin,
diff --git a/iso/builder/config/hooks/normal/9000-bee-setup.hook.chroot b/iso/builder/config/hooks/normal/9000-bee-setup.hook.chroot
index 26b0756..942d4bd 100755
--- a/iso/builder/config/hooks/normal/9000-bee-setup.hook.chroot
+++ b/iso/builder/config/hooks/normal/9000-bee-setup.hook.chroot
@@ -15,7 +15,8 @@ ensure_bee_console_user() {
     mkdir -p /home/bee
     chown -R bee:bee /home/bee
     echo "bee:eeb" | chpasswd
-    usermod -aG sudo,video,input,render bee 2>/dev/null || true
+    groupadd -f ipmi 2>/dev/null || true
+    usermod -aG sudo,video,input,render,ipmi bee 2>/dev/null || true
 }
 
 ensure_bee_console_user
diff --git a/iso/overlay/etc/udev/rules.d/99-ipmi.rules b/iso/overlay/etc/udev/rules.d/99-ipmi.rules
new file mode 100644
index 0000000..e04a4f1
--- /dev/null
+++ b/iso/overlay/etc/udev/rules.d/99-ipmi.rules
@@ -0,0 +1,2 @@
+# Allow ipmi group to access IPMI device without root
+KERNEL=="ipmi[0-9]*", GROUP="ipmi", MODE="0660"