Date: Friday, September 13, 2019 @ 19:11:38 Author: jelle Revision: 362592
upgpkg: prometheus-blackbox-exporter 0.15.0-1 Update to 0.15 and add more security hardening. Modified: prometheus-blackbox-exporter/trunk/PKGBUILD prometheus-blackbox-exporter/trunk/prometheus-blackbox-exporter.service --------------------------------------+ PKGBUILD | 8 ++++---- prometheus-blackbox-exporter.service | 8 +++++++- 2 files changed, 11 insertions(+), 5 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2019-09-13 19:06:30 UTC (rev 362591) +++ PKGBUILD 2019-09-13 19:11:38 UTC (rev 362592) @@ -1,8 +1,8 @@ # Maintainer: Jelle van der Waa <[email protected]> pkgname=prometheus-blackbox-exporter -pkgver=0.14.0 -pkgrel=4 +pkgver=0.15.0 +pkgrel=1 pkgdesc="Allows blackbox probing of endpoints over HTTP, HTTPS, DNS, TCP and ICMP" arch=('x86_64') url="https://github.com/prometheus/blackbox_exporter"; @@ -10,8 +10,8 @@ depends=(glibc) makedepends=(go-pie git) source=(https://github.com/prometheus/blackbox_exporter/archive/v${pkgver}.tar.gz prometheus-blackbox-exporter.service) -sha512sums=('58f379cdeef671376105532450ffb3a6fef0ea071d493fbef40d761c6cbaec47bb49c9c2e5c070f3d0e598396d7ad9b2c5af100c9a69aee04877442c7bdaf120' - '3d8c060bda4baf6ae56f162fd6b3f8668bae8e80a7cd40a40cca007fe565c5872142dac8c1821944aa146d52b55720b9cc3e4b3e3ec77f76241f0cdbf01532b3') +sha512sums=('dff23d51292ed7b56f403d9a70c02a4d4e1f2a43f0bd6763598b310c07c7564d39fbed29c7b2b03b1848d33c3779b4922396212a3c9252c8149fdd9208d8a3b7' + 'd50d40d3b8de03967a467db5d0ead3f8a9c770464c6028580022b60651384075d9437a3efb98b6f8d5e6df967ade09f839552e8d67c254d590016fc51b11def9') check() { cd blackbox_exporter-$pkgver Modified: prometheus-blackbox-exporter.service =================================================================== --- prometheus-blackbox-exporter.service 2019-09-13 19:06:30 UTC (rev 362591) +++ prometheus-blackbox-exporter.service 2019-09-13 19:11:38 UTC (rev 362592) @@ -7,7 +7,7 @@ ExecReload=/bin/kill -HUP $MAINPID DynamicUser=true -NoNewPrivilieges=true +NoNewPrivileges=true ProtectSystem=full ProtectKernelModules=true ProtectKernelTunables=true @@ -14,7 +14,13 @@ PrivateTmp=true LockPersonality=true ProtectHostname=true +ProtectHome=true ProtectControlGroups=true +PrivateDevices=true +PrivateUsers=true +RestrictRealtime=true +CapabilityBoundingSet= +MemoryDenyWriteExecute=true [Install] WantedBy=multi-user.target
