George Rawlinson pushed to branch main at Arch Linux / Packaging / Packages / 
prometheus-ipmi-exporter


Commits:
57d86ca9 by Alex . at 2026-07-04T11:44:31+00:00
fix: missing privileges; devices; capabilities
- - - - -


1 changed file:

- systemd.service


Changes:

=====================================
systemd.service
=====================================
@@ -14,7 +14,6 @@ ExecStart=/usr/bin/prometheus-ipmi-exporter 
--config.file=/etc/prometheus/ipmi-e
 User=prometheus-ipmi-exporter
 Group=prometheus-ipmi-exporter
 ExecReload=/bin/kill -HUP $MAINPID
-NoNewPrivileges=true
 ProtectHome=true
 ProtectSystem=full
 ProtectHostname=true
@@ -25,9 +24,11 @@ LockPersonality=true
 RestrictRealtime=yes
 RestrictNamespaces=yes
 MemoryDenyWriteExecute=yes
-PrivateDevices=yes
+DeviceAllow=/dev/ipmi0 rw
+DeviceAllow=/dev/bmc rw
+DeviceAllow=/dev/dcmi rw
 PrivateTmp=true
-CapabilityBoundingSet=
+CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_DAC_OVERRIDE
 
 [Install]
 WantedBy=multi-user.target



View it on GitLab: 
https://gitlab.archlinux.org/archlinux/packaging/packages/prometheus-ipmi-exporter/-/commit/57d86ca96af254935e933ff747c8e4bb505f5d66

-- 
View it on GitLab: 
https://gitlab.archlinux.org/archlinux/packaging/packages/prometheus-ipmi-exporter/-/commit/57d86ca96af254935e933ff747c8e4bb505f5d66
You're receiving this email because of your account on gitlab.archlinux.org. 
Manage all notifications: https://gitlab.archlinux.org/-/profile/notifications 
| Help: https://gitlab.archlinux.org/help


Reply via email to