Source: prometheus-node-exporter-collectors
Version: 0.0~git20260402.7b3b207-1
Severity: wishlist


Hey.


/var/lib/prometheus/node-exporter is owned root:root, which makes it
rather problematc to let collectors that don’t run as root write there
(in particular atomically).

Could you perhaps add a dedicated system group like 
prometheus-textfile-collectors
or something like that and make the directory 
root:prometheus-textfile-collectors
owned with g+rwx permissions?
Users for other collectors could then simply be added to that group.

Simlpy making o+rwt (like /tmp) would not be a solution, as it would allow any
user on the system to export metrics and open a security hole.


Cheers,
Chris.

Reply via email to