mirror of
https://github.com/juanfont/headscale.git
synced 2026-07-08 00:50:20 +09:00
Filter @resources from the list of allowed syscalls
This commit is contained in:
committed by
nblock
parent
6e0814a845
commit
f6865fb40c
@@ -45,6 +45,7 @@ StateDirectoryMode=0750
|
||||
SystemCallArchitectures=native
|
||||
SystemCallFilter=@system-service
|
||||
SystemCallFilter=~@privileged
|
||||
SystemCallFilter=~@resources
|
||||
UMask=0077
|
||||
|
||||
[Install]
|
||||
|
||||
Reference in New Issue
Block a user