fix(node): restore Linux network inventory and expose read failures

This commit is contained in:
DCCONSTRUCTIONS
2026-09-05 18:47:12 +03:00
parent 79911eb316
commit 15bb793e5e
10 changed files with 110 additions and 43 deletions
@@ -23,7 +23,9 @@ ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
RestrictSUIDSGID=yes
RestrictAddressFamilies=AF_UNIX AF_INET
# Go reads interface/address inventory through route netlink on Linux.
# CAP_NET_ADMIN stays absent; this does not grant network reconfiguration.
RestrictAddressFamilies=AF_UNIX AF_INET AF_NETLINK
CapabilityBoundingSet=
LockPersonality=yes
LimitNOFILE=1024