fix(node): restore Linux network inventory and expose read failures

This commit is contained in:
DCCONSTRUCTIONS
2026-09-05 18:47:12 +03:00
parent 79911eb316
commit 15bb793e5e
10 changed files with 110 additions and 43 deletions
+1 -1
View File
@@ -13,7 +13,7 @@ import tarfile
ROOT = Path(__file__).resolve().parents[1]
VERSION = "0.3.1"
VERSION = "0.3.2"
BRAND_SHA256 = "8bfee8ca9f98e0db48d98aae3af4b32493b8593e18b064a0239d513d824182af"
@@ -23,7 +23,9 @@ ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
RestrictSUIDSGID=yes
RestrictAddressFamilies=AF_UNIX AF_INET
# Go reads interface/address inventory through route netlink on Linux.
# CAP_NET_ADMIN stays absent; this does not grant network reconfiguration.
RestrictAddressFamilies=AF_UNIX AF_INET AF_NETLINK
CapabilityBoundingSet=
LockPersonality=yes
LimitNOFILE=1024