[arch-commits] Commit in prometheus/trunk (PKGBUILD prometheus.service)

[Jelle van der Waa]

    Date: Sunday, September 8, 2019 @ 15:40:18
  Author: jelle
Revision: 362055

Apply more systemd hardening

Modified:
  prometheus/trunk/PKGBUILD
  prometheus/trunk/prometheus.service

--------------------+
 PKGBUILD           |    2 +-
 prometheus.service |    5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2019-09-08 15:28:06 UTC (rev 362054)
+++ PKGBUILD	2019-09-08 15:40:18 UTC (rev 362055)
@@ -19,7 +19,7 @@
         prometheus.sysusers)
 
 sha256sums=('2d6019c1b58fdd509feb52eea3a01edd0eda3342a32ba0c3af76d30a571d16c5'
-            'e3f742c3e6eca7d4e0e6d190d88cf71692ca8810a77ef66831e450cb8e0a84a7'
+            '6bb81e0e9c982c36605ba0ac8fd60f3bca369bc0cb20017f160a1ab337a4ec19'
             '2747fabb4e56b808361eb7dd7acf9729ab8973d1ebe2f857dd56f6c71f71e45f')
 
 build() {

Modified: prometheus.service
===================================================================
--- prometheus.service	2019-09-08 15:28:06 UTC (rev 362054)
+++ prometheus.service	2019-09-08 15:40:18 UTC (rev 362055)
@@ -12,6 +12,11 @@
 NoNewPrivileges=true
 ProtectHome=true
 ProtectSystem=full
+ProtectHostname=true
+ProtectControlGroups=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+LockPersonality=true
 
 [Install]
 WantedBy=multi-user.target