install: two-user model ownership and deployment

2026-05-29 22:29:54 +00:00
parent 200e078bc5
commit cb683f7e61
4 changed files with 123 additions and 86 deletions
@@ -1,2 +0,0 @@
-# WebUI user ({{ USER_NAME }}) no longer has sudo access.
-# Privileged operations are handled by vacuum-walld via the daemon API.
@@ -33,7 +33,7 @@ LockPersonality=yes
 SystemCallFilter=@system-service
 PrivateDevices=yes

-RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
 IPAddressDeny=any
 IPAddressAllow=localhost
 NoNewPrivileges=yes