[arch-commits] Commit in prometheus-node-exporter/trunk (2 files)

[Jelle van der Waa]

    Date: Monday, February 24, 2020 @ 20:50:09
  Author: jelle
Revision: 376165

upgpkg: prometheus-node-exporter 0.18.1-4

Change ProtectHome to read-only so systemd can view mount points in /home no
files should be accesible as the node exporter runs as a different user.
Resolves FS#62677

Modified:
  prometheus-node-exporter/trunk/PKGBUILD
  prometheus-node-exporter/trunk/prometheus-node-exporter.service

----------------------------------+
 PKGBUILD                         |    6 +++---
 prometheus-node-exporter.service |    2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2020-02-24 20:32:07 UTC (rev 376164)
+++ PKGBUILD	2020-02-24 20:50:09 UTC (rev 376165)
@@ -2,7 +2,7 @@
 
 pkgname=prometheus-node-exporter
 pkgver=0.18.1
-pkgrel=3
+pkgrel=4
 
 pkgdesc='Exporter for machine metrics'
 url='https://github.com/prometheus/node_exporter'
@@ -14,7 +14,7 @@
 
 backup=('etc/conf.d/prometheus-node-exporter')
 
-source=("https://github.com/prometheus/node_exporter/archive/v$pkgver.tar.gz"
+source=("$pkgname-$pkgver.tar.gz::https://github.com/prometheus/node_exporter/archive/v$pkgver.tar.gz"
         prometheus-node-exporter.conf
         prometheus-node-exporter.service
         prometheus-node-exporter.sysusers)
@@ -21,7 +21,7 @@
 
 sha256sums=('9ddf187c462f2681ab4516410ada0e6f0f03097db6986686795559ea71a07694'
             'ce93e2b95bfc86a8a046e2f9175408e1cbffa784fd3b65dd141fde70b5bb2585'
-            '727ed5df3395fd77d8e2ae8c3ab7a6352213655e38c9b37badfea1aa90556394'
+            '457e305760323f941d20248e2ca5817ae4a8b5586f79a2331b968bf3baa66c5b'
             'c7fd0b1793dfe7a354a28e978d3c79e7195eaf43376b9eece37e996fe0772c5c')
 
 build() {

Modified: prometheus-node-exporter.service
===================================================================
--- prometheus-node-exporter.service	2020-02-24 20:32:07 UTC (rev 376164)
+++ prometheus-node-exporter.service	2020-02-24 20:50:09 UTC (rev 376165)
@@ -11,7 +11,7 @@
 ExecStart=/usr/bin/prometheus-node-exporter $NODE_EXPORTER_ARGS
 ExecReload=/bin/kill -HUP $MAINPID
 NoNewPrivileges=true
-ProtectHome=true
+ProtectHome=read-only
 ProtectSystem=strict
 
 [Install]