Add AF_UNIX to RestrictAddressFamilies (#35)

AF_UNIX is needed so that cgroup_exporter can get user information from sss.
treydock · Jun 24, 2024 · 00c65eb · 00c65eb
1 parent bdc4981
commit 00c65eb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packaging/rpm/cgroup_exporter.service b/packaging/rpm/cgroup_exporter.service
@@ -18,7 +18,7 @@ ProtectHome=yes
 ProtectControlGroups=yes
 ProtectKernelModules=yes
 ProtectKernelTunables=yes
-RestrictAddressFamilies=AF_INET AF_INET6
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
 RestrictNamespaces=yes
 RestrictRealtime=yes
 RestrictSUIDSGID=yes