nixos/prometheus-smartctl: set proper SystemCallFilter

2022-10-25 16:47:09 +08:00
parent f4342c11e5
commit afb8d0e5a6
1 changed files with 1 additions and 4 deletions
@@ -66,10 +66,7 @@ in {
      ProtectProc = "invisible";
      ProcSubset = "pid";
      SupplementaryGroups = [ "disk" ];
-      SystemCallFilter = [
-        "@system-service"
-        "~@privileged @resources"
-      ];
+      SystemCallFilter = [ "@system-service" "~@privileged" ];
    };
  };
 }