fixed syspatch

This commit is contained in:
ston1th 2020-10-12 18:48:24 +02:00
commit 77d803d511
2 changed files with 8 additions and 1 deletions

View file

@ -24,6 +24,12 @@ cp rcctl_exporter.rc /etc/rc.d/rcctl_exporter
chmod 555 /etc/rc.d/rcctl_exporter chmod 555 /etc/rc.d/rcctl_exporter
``` ```
Allow syspatch execution as root user:
```
echo "permit nopass _rcctlexporter as root cmd /usr/sbin/syspatch args -c" >>/etc/doas.conf
```
Enable and start service: Enable and start service:
``` ```

View file

@ -14,6 +14,7 @@ import (
const ( const (
namespace = "syspatch" namespace = "syspatch"
doas = "/usr/bin/doas"
syspatch = "/usr/sbin/syspatch" syspatch = "/usr/sbin/syspatch"
errUpdateInterval = time.Second * 30 errUpdateInterval = time.Second * 30
@ -44,7 +45,7 @@ func NewCollector(logger log.Logger) (*Collector, error) {
func (c *Collector) getPatches() { func (c *Collector) getPatches() {
for { for {
cmd := exec.Command(syspatch, "-c") cmd := exec.Command(doas, syspatch, "-c")
out, err := cmd.Output() out, err := cmd.Output()
if err != nil { if err != nil {
level.Debug(c.logger).Log("msg", "syspatch list patches", "error", err) level.Debug(c.logger).Log("msg", "syspatch list patches", "error", err)