Unverified Commit ea2a9ac9 authored by Pascal Bach's avatar Pascal Bach Committed by GitHub
Browse files

Merge pull request #200222 from Ma27/prometheus-hardening-regression 

nixos/prometheus: fix startup w/hardened service
parents 3aa5166a dcb32bed

nixos/modules/services/monitoring/prometheus/default.nix

+1 −1
Original line number Diff line number Diff line
@@ -1822,7 +1822,7 @@ in 
        RestrictRealtime = true;

        RestrictSUIDSGID = true;

        SystemCallArchitectures = "native";

        SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ];

        SystemCallFilter = [ "@system-service" "~@privileged" ];

      };

    };

    # prometheus-config-reload will activate after prometheus. However, what we