diff options
| -rw-r--r-- | contrib/prometheus-pacman-exporter.service | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/contrib/prometheus-pacman-exporter.service b/contrib/prometheus-pacman-exporter.service index 770295c..82b5854 100644 --- a/contrib/prometheus-pacman-exporter.service +++ b/contrib/prometheus-pacman-exporter.service @@ -17,7 +17,6 @@ ReadWritePaths=/var/lib/prometheus/node-exporter PrivateTmp=true # Mount a minimal /dev without the access to raw block or character devices PrivateDevices=true -# ProtectSystem and ProtectHome are ineffective for root and intentionally omitted # Hide other processes in /proc ProtectProc=invisible @@ -51,8 +50,6 @@ NoNewPrivileges=true # Syscall filtering SystemCallArchitectures=native SystemCallFilter=@system-service -SystemCallFilter=~@privileged @resources @mount @swap @reboot -SystemCallFilter=setfsuid setfsgid [Install] WantedBy=multi-user.target |