[arch-commits] Commit in prometheus/trunk (PKGBUILD prometheus.service)

[Jelle van der Waa]

    Date: Sunday, September 15, 2019 @ 11:03:31
  Author: jelle
Revision: 362832

upgpkg: prometheus 2.12.0-1

Upstream update and apply more hardening.

Modified:
  prometheus/trunk/PKGBUILD
  prometheus/trunk/prometheus.service

--------------------+
 PKGBUILD           |    6 +++---
 prometheus.service |    5 +++++
 2 files changed, 8 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2019-09-15 10:34:33 UTC (rev 362831)
+++ PKGBUILD	2019-09-15 11:03:31 UTC (rev 362832)
@@ -1,7 +1,7 @@
 # Maintainer: Johannes Löthberg <johannes at kyriasis.com>
 
 pkgname=prometheus
-pkgver=2.11.2
+pkgver=2.12.0
 pkgrel=1
 
 pkgdesc='An open-source systems monitoring and alerting toolkit'
@@ -18,8 +18,8 @@
         prometheus.service
         prometheus.sysusers)
 
-sha256sums=('2d6019c1b58fdd509feb52eea3a01edd0eda3342a32ba0c3af76d30a571d16c5'
-            '6bb81e0e9c982c36605ba0ac8fd60f3bca369bc0cb20017f160a1ab337a4ec19'
+sha256sums=('9bd9ae6df02777a9ba3f6f544338865861decabd02054aa64975449bd6009e5a'
+            '116a5444d7da1f96446a9801f0c9df9c45e7d6af497c9fabf36f0dd26c31c025'
             '2747fabb4e56b808361eb7dd7acf9729ab8973d1ebe2f857dd56f6c71f71e45f')
 
 build() {

Modified: prometheus.service
===================================================================
--- prometheus.service	2019-09-15 10:34:33 UTC (rev 362831)
+++ prometheus.service	2019-09-15 11:03:31 UTC (rev 362832)
@@ -17,6 +17,11 @@
 ProtectKernelModules=true
 ProtectKernelTunables=true
 LockPersonality=true
+RestrictRealtime=yes
+RestrictNamespaces=yes
+MemoryDenyWriteExecute=yes
+PrivateDevices=yes
+CapabilityBoundingSet=
 
 [Install]
 WantedBy=multi-user.target