diff --git a/packaging/systemd/headscale.service b/packaging/systemd/headscale.service index 6881b290c..9d3b69712 100644 --- a/packaging/systemd/headscale.service +++ b/packaging/systemd/headscale.service @@ -45,6 +45,7 @@ StateDirectoryMode=0750 SystemCallArchitectures=native SystemCallFilter=@system-service SystemCallFilter=~@privileged +SystemCallFilter=~@resources UMask=0077 [Install]