Improve sandboxing of prometheus collectors

[chef.git] / cookbooks / fail2ban / recipes / default.rb

diff --git a/cookbooks/fail2ban/recipes/default.rb b/cookbooks/fail2ban/recipes/default.rb
index ca03d37d688ee97e734d6a7ed1cac876ce2b06fa..0a4c479f469537a5d88b92b8d54c9ba2ce3f4ae8 100644 (file)
--- a/cookbooks/fail2ban/recipes/default.rb
+++ b/cookbooks/fail2ban/recipes/default.rb
@@ -49,4 +49,6 @@ munin_plugin "fail2ban"
 
 prometheus_exporter "fail2ban" do
   port 9635
+  user "root"
+  restrict_address_families "AF_UNIX"
 end