Mirrors/headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2026-07-17 16:36:02 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Filter @resources from the list of allowed syscalls

Browse source
This commit is contained in:
Florian Preinstorfer 2026-06-22 11:46:17 +02:00 • committed by nblock
parent 6e0814a845
commit f6865fb40c
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
packaging/systemd/headscale.service
View file

@ -45,6 +45,7 @@ StateDirectoryMode=0750
SystemCallArchitectures=native SystemCallArchitectures=native
SystemCallFilter=@system-service SystemCallFilter=@system-service
SystemCallFilter=~@privileged SystemCallFilter=~@privileged
SystemCallFilter=~@resources
UMask=0077 UMask=0077
[Install] [Install]