Mirrors/headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2026-07-17 16:36:02 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add DevicePolicy and MemoryDenyWriteExecute

Browse source 
I've used those for a long time with my setups.
This commit is contained in:
Florian Preinstorfer 2026-06-22 11:39:07 +02:00 • committed by nblock
parent 6e6ea3758d
commit 6e0814a845
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
packaging/systemd/headscale.service
View file

@ -16,7 +16,9 @@ ReadWritePaths=/var/lib/headscale
AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
DevicePolicy=closed
LockPersonality=true
MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateDevices=true
PrivateMounts=true