Filter @resources from the list of allowed syscalls

nblock · nblock · commit 4779e037ae37 · 2026-06-24T11:29:57.000+02:00
diff --git a/packaging/systemd/headscale.service b/packaging/systemd/headscale.service
@@ -45,6 +45,7 @@ StateDirectoryMode=0750
 SystemCallArchitectures=native
 SystemCallFilter=@system-service
 SystemCallFilter=~@privileged
+SystemCallFilter=~@resources
 UMask=0077
 
 [Install]
