diff options
| author | MidAutumnMoon <me@418.im> | 2022-10-25 16:47:09 +0800 |
|---|---|---|
| committer | MidAutumnMoon <me@418.im> | 2022-10-25 16:47:09 +0800 |
| commit | afb8d0e5a62c6018c4cd3545c76e672cec6ccabb (patch) | |
| tree | b3b56e83d9f15d0169cd1e19d8cc6ca9a6320270 /nixos | |
| parent | f4342c11e5feee7dd805045ed4dd3fb069d5ac83 (diff) | |
nixos/prometheus-smartctl: set proper SystemCallFilter
Diffstat (limited to 'nixos')
| -rw-r--r-- | nixos/modules/services/monitoring/prometheus/exporters/smartctl.nix | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/nixos/modules/services/monitoring/prometheus/exporters/smartctl.nix b/nixos/modules/services/monitoring/prometheus/exporters/smartctl.nix index 8906c25d50376..7348c6e9b0b45 100644 --- a/nixos/modules/services/monitoring/prometheus/exporters/smartctl.nix +++ b/nixos/modules/services/monitoring/prometheus/exporters/smartctl.nix @@ -66,10 +66,7 @@ in { ProtectProc = "invisible"; ProcSubset = "pid"; SupplementaryGroups = [ "disk" ]; - SystemCallFilter = [ - "@system-service" - "~@privileged @resources" - ]; + SystemCallFilter = [ "@system-service" "~@privileged" ]; }; }; } |