Skip to content

Commit 0d9c15d

Browse files
nblocknblock
committed
Only allow to execute /usr/bin/headscale
1 parent 4779e03 commit 0d9c15d

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

‎packaging/systemd/headscale.service‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,9 @@ ExecReload=/usr/bin/kill -HUP $MAINPID
1111
Restart=always
1212
RestartSec=5
1313

14+
NoExecPaths=/
15+
ExecPaths=/usr/bin/headscale
16+
1417
WorkingDirectory=/var/lib/headscale
1518
ReadWritePaths=/var/lib/headscale
1619

0 commit comments

Comments
 (0)