From 77d803d511df29ded4b3d042f7d9c4faa3e3c5a0 Mon Sep 17 00:00:00 2001
From: ston1th <ston1th@giftfish.de>
Date: Mon, 12 Oct 2020 18:48:24 +0200
Subject: [PATCH] fixed syspatch

---
 README.md            | 6 ++++++
 syspatch/syspatch.go | 3 ++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index dd6ef99..50f9d98 100644
--- a/README.md
+++ b/README.md
@@ -24,6 +24,12 @@ cp rcctl_exporter.rc /etc/rc.d/rcctl_exporter
 chmod 555 /etc/rc.d/rcctl_exporter
 ```
 
+Allow syspatch execution as root user:
+
+```
+echo "permit nopass _rcctlexporter as root cmd /usr/sbin/syspatch args -c" >>/etc/doas.conf
+```
+
 Enable and start service:
 
 ```
diff --git a/syspatch/syspatch.go b/syspatch/syspatch.go
index f62c0e5..505c7a2 100644
--- a/syspatch/syspatch.go
+++ b/syspatch/syspatch.go
@@ -14,6 +14,7 @@ import (
 
 const (
 	namespace = "syspatch"
+	doas      = "/usr/bin/doas"
 	syspatch  = "/usr/sbin/syspatch"
 
 	errUpdateInterval = time.Second * 30
@@ -44,7 +45,7 @@ func NewCollector(logger log.Logger) (*Collector, error) {
 
 func (c *Collector) getPatches() {
 	for {
-		cmd := exec.Command(syspatch, "-c")
+		cmd := exec.Command(doas, syspatch, "-c")
 		out, err := cmd.Output()
 		if err != nil {
 			level.Debug(c.logger).Log("msg", "syspatch list patches", "error", err)