Skip to content

Commit 13645ce

Browse files
kradalbykradalby
committed
Add more capabilities for systemd
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
1 parent a71cc81 commit 13645ce

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

‎docs/packaging/headscale.systemd.service

+1-1
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ WorkingDirectory=/var/lib/headscale
1616
ReadWritePaths=/var/lib/headscale /var/run
1717

1818
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_CHOWN
19-
CapabilityBoundingSet=CAP_CHOWN
19+
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN
2020
LockPersonality=true
2121
NoNewPrivileges=true
2222
PrivateDevices=true

0 commit comments

Comments
 (0)