public/headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2026-07-08 00:50:20 +09:00
Code Issues Packages Projects Releases Wiki Activity

Add DevicePolicy and MemoryDenyWriteExecute

Browse Source 
I've used those for a long time with my setups.
This commit is contained in:
Florian Preinstorfer
2026-06-22 11:39:07 +02:00
committed by nblock
parent 6e6ea3758d
commit 6e0814a845
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packaging/systemd/headscale.service
+2
View File
@@ -16,7 +16,9 @@ ReadWritePaths=/var/lib/headscale
AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
DevicePolicy=closed
LockPersonality=true
MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateDevices=true
PrivateMounts=true