aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDennis Fink2026-05-06 22:26:50 +0200
committerDennis Fink2026-05-06 22:26:50 +0200
commit4172e92e4e4452a72c3a9d06492702d567d1c951 (patch)
tree5a72d94d54056ee66567ef09eedbabe99cf42068
parent5a2d4ca818e6ee45f99e4c92310e137a7b1b4aea (diff)
downloadprometheus-borgmatic-exporter-4172e92e4e4452a72c3a9d06492702d567d1c951.tar.gz
prometheus-borgmatic-exporter-4172e92e4e4452a72c3a9d06492702d567d1c951.zip
fix(systemd): allow setfsuid and setfsgid syscalls for exporter execution
The restricted SystemCallFilter blocked setfsuid and setfsgid, causing the exporter to fail when executed from a uv-managed installation environment.
Diffstat (limited to '')
-rw-r--r--contrib/prometheus-borgmatic-exporter.service1
1 files changed, 1 insertions, 0 deletions
diff --git a/contrib/prometheus-borgmatic-exporter.service b/contrib/prometheus-borgmatic-exporter.service
index 56c3d18..4551d34 100644
--- a/contrib/prometheus-borgmatic-exporter.service
+++ b/contrib/prometheus-borgmatic-exporter.service
@@ -56,6 +56,7 @@ AmbientCapabilities=
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~@privileged @resources @mount @swap @reboot
+SystemCallFilter=setfsuid setfsgid
[Install]
WantedBy=multi-user.target