pyrox.dev / nixpkgs
lol
fork atom

nixos/prometheus-smartctl: set proper SystemCallFilter

MidAutumnMoon afb8d0e5 f4342c11

options
unified split
Changed files
+1 -4
nixos
modules
services
monitoring
prometheus
exporters
smartctl.nix
+1 -4
nixos/modules/services/monitoring/prometheus/exporters/smartctl.nix 
···

       
66

       
 

       
      ProtectProc = "invisible";


     

       
67

       
 

       
      ProcSubset = "pid";


     

       
68

       
 

       
      SupplementaryGroups = [ "disk" ];


     

       
69

       
-

       
      SystemCallFilter = [


     

       
70

       
-

       
        "@system-service"


     

       
71

       
-

       
        "~@privileged @resources"


     

       
72

       
-

       
      ];


     

       
73

       
 

       
    };


     

       
74

       
 

       
  };


     

       
75

       
 

       
}


     
···

       
66

       
 

       
      ProtectProc = "invisible";


     

       
67

       
 

       
      ProcSubset = "pid";


     

       
68

       
 

       
      SupplementaryGroups = [ "disk" ];


     

       
69

       
+

       
      SystemCallFilter = [ "@system-service" "~@privileged" ];


     

       

       

       
     

       

       

       
     

       

       

       
     

       
70

       
 

       
    };


     

       
71

       
 

       
  };


     

       
72

       
 

       
}