From 4172e92e4e4452a72c3a9d06492702d567d1c951 Mon Sep 17 00:00:00 2001
From: Dennis Fink
Date: Wed, 6 May 2026 22:26:50 +0200
Subject: fix(systemd): allow setfsuid and setfsgid syscalls for exporter
 execution

The restricted SystemCallFilter blocked setfsuid and setfsgid,
causing the exporter to fail when executed from a uv-managed
installation environment.
---
 contrib/prometheus-borgmatic-exporter.service | 1 +
 1 file changed, 1 insertion(+)

(limited to 'contrib/prometheus-borgmatic-exporter.service')

diff --git a/contrib/prometheus-borgmatic-exporter.service b/contrib/prometheus-borgmatic-exporter.service
index 56c3d18..4551d34 100644
--- a/contrib/prometheus-borgmatic-exporter.service
+++ b/contrib/prometheus-borgmatic-exporter.service
@@ -56,6 +56,7 @@ AmbientCapabilities=
 SystemCallArchitectures=native
 SystemCallFilter=@system-service
 SystemCallFilter=~@privileged @resources @mount @swap @reboot
+SystemCallFilter=setfsuid setfsgid
 
 [Install]
 WantedBy=multi-user.target
-- 
cgit v1.3.1