Date: Sunday, February 23, 2020 @ 21:56:24 Author: jelle Revision: 376111
upgpkg: prometheus-blackbox-exporter 0.16.0-2 Add CAP_NET_RAW capabilities to the systemd service to allow ICMP pings, resolves FS#63606 Modified: prometheus-blackbox-exporter/trunk/PKGBUILD prometheus-blackbox-exporter/trunk/prometheus-blackbox-exporter.service --------------------------------------+ PKGBUILD | 6 +++--- prometheus-blackbox-exporter.service | 4 +++- 2 files changed, 6 insertions(+), 4 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2020-02-23 20:11:37 UTC (rev 376110) +++ PKGBUILD 2020-02-23 21:56:24 UTC (rev 376111) @@ -2,7 +2,7 @@ pkgname=prometheus-blackbox-exporter pkgver=0.16.0 -pkgrel=1 +pkgrel=2 pkgdesc="Allows blackbox probing of endpoints over HTTP, HTTPS, DNS, TCP and ICMP" arch=('x86_64') url="https://github.com/prometheus/blackbox_exporter" @@ -9,9 +9,9 @@ license=('Apache') depends=(glibc) makedepends=(go-pie git) -source=(https://github.com/prometheus/blackbox_exporter/archive/v${pkgver}.tar.gz prometheus-blackbox-exporter.service) +source=($pkgname-$pkgver.tar.gz::https://github.com/prometheus/blackbox_exporter/archive/v${pkgver}.tar.gz prometheus-blackbox-exporter.service) sha512sums=('85103b62e345ab5d59626e658047ac75649f9ef991c9bbaff32b95ea75ec2da2bf916573e664520766158805c6cf24163f2850c885a594d32b4f9c4c9dbed1a8' - 'd50d40d3b8de03967a467db5d0ead3f8a9c770464c6028580022b60651384075d9437a3efb98b6f8d5e6df967ade09f839552e8d67c254d590016fc51b11def9') + 'b32d7772cbd8a2fc741d827a7f221d1302ab0c5833c095e5b6dc6befa46a1b12c22e91252fd0e4cf07c9c309d6315c6e1d020508a3baaaa891ab9f7f7d690eae') check() { cd blackbox_exporter-$pkgver Modified: prometheus-blackbox-exporter.service =================================================================== --- prometheus-blackbox-exporter.service 2020-02-23 20:11:37 UTC (rev 376110) +++ prometheus-blackbox-exporter.service 2020-02-23 21:56:24 UTC (rev 376111) @@ -16,11 +16,13 @@ ProtectHostname=true ProtectHome=true ProtectControlGroups=true +ProtectKernelLogs=true PrivateDevices=true -PrivateUsers=true RestrictRealtime=true CapabilityBoundingSet= MemoryDenyWriteExecute=true +CapabilityBoundingSet=CAP_NET_RAW +AmbientCapabilities=CAP_NET_RAW [Install] WantedBy=multi-user.target