diff options
| author | Dennis Fink | 2026-09-20 12:18:20 +0200 |
|---|---|---|
| committer | Dennis Fink | 2026-09-20 12:18:20 +0200 |
| commit | b0fd72a136a4ec36c54b5ae5c27479acb7e7a020 (patch) | |
| tree | 0d4a4b53089402b6829aabe22d1e0007ea5f4e43 | |
| parent | 0f1d5637df9286af9999fc7d1c03025e82ffda34 (diff) | |
| download | prometheus-pacman-exporter-b0fd72a136a4ec36c54b5ae5c27479acb7e7a020.tar.gz prometheus-pacman-exporter-b0fd72a136a4ec36c54b5ae5c27479acb7e7a020.zip | |
fix(systemd): allow pacman commands to run
Remove syscall restrictions that prevent pacman and related subprocesses
from running successfully under the systemd service.
Also remove the outdated comment about ProtectSystem and ProtectHome.
| -rw-r--r-- | contrib/prometheus-pacman-exporter.service | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/contrib/prometheus-pacman-exporter.service b/contrib/prometheus-pacman-exporter.service index 770295c..82b5854 100644 --- a/contrib/prometheus-pacman-exporter.service +++ b/contrib/prometheus-pacman-exporter.service @@ -17,7 +17,6 @@ ReadWritePaths=/var/lib/prometheus/node-exporter PrivateTmp=true # Mount a minimal /dev without the access to raw block or character devices PrivateDevices=true -# ProtectSystem and ProtectHome are ineffective for root and intentionally omitted # Hide other processes in /proc ProtectProc=invisible @@ -51,8 +50,6 @@ NoNewPrivileges=true # Syscall filtering SystemCallArchitectures=native SystemCallFilter=@system-service -SystemCallFilter=~@privileged @resources @mount @swap @reboot -SystemCallFilter=setfsuid setfsgid [Install] WantedBy=multi-user.target |