diff options
| author | Dennis Fink | 2026-09-20 12:18:20 +0200 |
|---|---|---|
| committer | Dennis Fink | 2026-09-20 12:18:20 +0200 |
| commit | b0fd72a136a4ec36c54b5ae5c27479acb7e7a020 (patch) | |
| tree | 0d4a4b53089402b6829aabe22d1e0007ea5f4e43 | |
| parent | 0f1d5637df9286af9999fc7d1c03025e82ffda34 (diff) | |
| download | prometheus-pacman-exporter-b0fd72a136a4ec36c54b5ae5c27479acb7e7a020.tar.gz prometheus-pacman-exporter-b0fd72a136a4ec36c54b5ae5c27479acb7e7a020.zip | |
fix(systemd): allow pacman commands to run
Remove syscall restrictions that prevent pacman and related subprocesses
from running successfully under the systemd service.
Also remove the outdated comment about ProtectSystem and ProtectHome.
Diffstat (limited to '')
| -rw-r--r-- | contrib/prometheus-pacman-exporter.service | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/contrib/prometheus-pacman-exporter.service b/contrib/prometheus-pacman-exporter.service index 770295c..82b5854 100644 --- a/contrib/prometheus-pacman-exporter.service +++ b/contrib/prometheus-pacman-exporter.service @@ -17,7 +17,6 @@ ReadWritePaths=/var/lib/prometheus/node-exporter PrivateTmp=true # Mount a minimal /dev without the access to raw block or character devices PrivateDevices=true -# ProtectSystem and ProtectHome are ineffective for root and intentionally omitted # Hide other processes in /proc ProtectProc=invisible @@ -51,8 +50,6 @@ NoNewPrivileges=true # Syscall filtering SystemCallArchitectures=native SystemCallFilter=@system-service -SystemCallFilter=~@privileged @resources @mount @swap @reboot -SystemCallFilter=setfsuid setfsgid [Install] WantedBy=multi-user.target |