a814431445
* Telegraf v1.33.0 * Update changelog for v1.33.0 * chore(inputs.prometheus): Improve label and field selector logging (#16228) * fix(logging): Fix deplicated prefix+attrMsg in log message when redirectLogger is used (#16274) * fix(outputs.quix): Replace deprecated serializer type * feat(outputs.quix): Add plugin (#16144) * chore: Update go to v1.23.4 (#16265) * feat(outputs.influxdb_v2): Add rate limit implementation (#15742) * feat(outputs): Add rate-limiting infrastructure (#16258) * feat(logging): Allow overriding message key for structured logging (#16242) * chore(parsers.avro): Add unit-test for enum (#16260) * chore: Fix linter findings for `revive:exported` in `plugins/inputs/o*` (#16224) * chore(serializers)!: Remove old-style creation (#15971) * chore(deps): Bump golangci-lint from v1.62.0 to v1.62.2 (#16250) * chore(deps): Bump cloud.google.com/go/storage from 1.43.0 to 1.47.0 (#16235) * fix(logging): Clean up extra empty spaces when redirectLogger is used (#16255) * feat(outputs): Implement partial write errors (#16146) * feat(inputs.vsphere): Add cpu temperature field (#16109) * docs: Fix PostgreSQL example DSN (#16229) * fix(inputs.procstat): Handle running processes correctly across multiple filters (#16257) * feat(inputs.smart): Add Power on Hours and Cycle Count (#16230) * chore: Fix function names in comments (#16231) * fix(inputs.netflow): Decode flags in TCP and IP headers correctly (#16248) * docs(serializers.json): Fix typo (#16245) * chore(actions): Only check PR title for semantic commit message (#16253) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.29.3 to 1.32.6 (#16234) * chore(deps): Bump google.golang.org/grpc from 1.67.1 to 1.68.0 (#16233) * chore(deps): Bump cloud.google.com/go/bigquery from 1.63.1 to 1.64.0 (#16232) * chore(deps): Bump golang.org/x/net from 0.30.0 to 0.31.0 (#16236) OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/telegraf?expand=0&rev=97
25 lines
702 B
Diff
25 lines
702 B
Diff
diff --git a/scripts/telegraf.service b/scripts/telegraf.service
|
|
index 94cd26a5..c741bd59 100644
|
|
--- a/scripts/telegraf.service
|
|
+++ b/scripts/telegraf.service
|
|
@@ -5,6 +5,19 @@ After=network-online.target
|
|
Wants=network-online.target
|
|
|
|
[Service]
|
|
+# added automatically, for details please see
|
|
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
+ProtectSystem=full
|
|
+ProtectHome=true
|
|
+PrivateDevices=true
|
|
+ProtectHostname=true
|
|
+ProtectClock=true
|
|
+ProtectKernelTunables=true
|
|
+ProtectKernelModules=true
|
|
+ProtectKernelLogs=true
|
|
+ProtectControlGroups=true
|
|
+RestrictRealtime=true
|
|
+# end of automatic additions
|
|
Type=notify
|
|
NotifyAccess=all
|
|
EnvironmentFile=-/etc/default/telegraf
|