Merge pull request #200222 from Ma27/prometheus-hardening-regression

nixos/prometheus: fix startup w/hardened service
This commit is contained in:
Pascal Bach
2022-11-08 20:33:47 +01:00
committed by GitHub
@@ -1822,7 +1822,7 @@ in
RestrictRealtime = true;
RestrictSUIDSGID = true;
SystemCallArchitectures = "native";
SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ];
SystemCallFilter = [ "@system-service" "~@privileged" ];
};
};
# prometheus-config-reload will activate after prometheus. However, what we