Date: Sunday, September 8, 2019 @ 15:40:18 Author: jelle Revision: 362055
Apply more systemd hardening Modified: prometheus/trunk/PKGBUILD prometheus/trunk/prometheus.service --------------------+ PKGBUILD | 2 +- prometheus.service | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2019-09-08 15:28:06 UTC (rev 362054) +++ PKGBUILD 2019-09-08 15:40:18 UTC (rev 362055) @@ -19,7 +19,7 @@ prometheus.sysusers) sha256sums=('2d6019c1b58fdd509feb52eea3a01edd0eda3342a32ba0c3af76d30a571d16c5' - 'e3f742c3e6eca7d4e0e6d190d88cf71692ca8810a77ef66831e450cb8e0a84a7' + '6bb81e0e9c982c36605ba0ac8fd60f3bca369bc0cb20017f160a1ab337a4ec19' '2747fabb4e56b808361eb7dd7acf9729ab8973d1ebe2f857dd56f6c71f71e45f') build() { Modified: prometheus.service =================================================================== --- prometheus.service 2019-09-08 15:28:06 UTC (rev 362054) +++ prometheus.service 2019-09-08 15:40:18 UTC (rev 362055) @@ -12,6 +12,11 @@ NoNewPrivileges=true ProtectHome=true ProtectSystem=full +ProtectHostname=true +ProtectControlGroups=true +ProtectKernelModules=true +ProtectKernelTunables=true +LockPersonality=true [Install] WantedBy=multi-user.target