cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

Merge pull request #200222 from Ma27/prometheus-hardening-regression

Browse source 
nixos/prometheus: fix startup w/hardened service
This commit is contained in:
Pascal Bach 2022-11-08 20:33:47 +01:00 committed by GitHub
commit ea2a9ac9d3
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nixos/modules/services/monitoring/prometheus/default.nix
View file

@ -1822,7 +1822,7 @@ in
RestrictRealtime = true; RestrictRealtime = true;
RestrictSUIDSGID = true; RestrictSUIDSGID = true;
SystemCallArchitectures = "native"; SystemCallArchitectures = "native";
SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ]; SystemCallFilter = [ "@system-service" "~@privileged" ];
}; };
}; };
# prometheus-config-reload will activate after prometheus. However, what we # prometheus-config-reload will activate after prometheus. However, what we