mirror of
https://github.com/juanfont/headscale.git
synced 2026-09-25 17:54:54 +09:00
Filter @resources from the list of allowed syscalls
This commit is contained in:
committed by
nblock
parent
6e0814a845
commit
f6865fb40c
@@ -45,6 +45,7 @@ StateDirectoryMode=0750
|
|||||||
SystemCallArchitectures=native
|
SystemCallArchitectures=native
|
||||||
SystemCallFilter=@system-service
|
SystemCallFilter=@system-service
|
||||||
SystemCallFilter=~@privileged
|
SystemCallFilter=~@privileged
|
||||||
|
SystemCallFilter=~@resources
|
||||||
UMask=0077
|
UMask=0077
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
|
|||||||
Reference in New Issue
Block a user