diff --git a/packaging/systemd/headscale.service b/packaging/systemd/headscale.service index 6881b290..9d3b6971 100644 --- a/packaging/systemd/headscale.service +++ b/packaging/systemd/headscale.service @@ -45,6 +45,7 @@ StateDirectoryMode=0750 SystemCallArchitectures=native SystemCallFilter=@system-service SystemCallFilter=~@privileged +SystemCallFilter=~@resources UMask=0077 [Install]