From ac9bdcb42a3396268aebda74b7a69b1a6a4117b5 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Tue, 8 Nov 2022 09:32:15 +0100
Subject: ...

---
 hosts/vidhar/prometheus/default.nix | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

(limited to 'hosts/vidhar/prometheus')

diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix
index de7837dc..a8246e8c 100644
--- a/hosts/vidhar/prometheus/default.nix
+++ b/hosts/vidhar/prometheus/default.nix
@@ -400,9 +400,7 @@ in {
 
     systemd.services.prometheus = {
       serviceConfig = {
-        SystemCallFilter = [
-          "@resources"
-        ];
+        SystemCallFilter = mkForce [ "@system-service" "~@privileged" ];
       };
     };
 
-- 
cgit v1.2.3