user "root"
proc_subset "all"
protect_clock false
- restrict_address_families ["AF_UNIX", "AF_NETLINK"]
+ restrict_address_families %w[AF_UNIX AF_NETLINK]
system_call_filter ["@system-service", "@clock"]
options %w[
--collector.textfile.directory=/var/lib/prometheus/node-exporter