mesh: run the nvpn daemon as a dedicated non-root user - #89

Merged

kwsantiago merged 2 commits into

mainfrom

mesh-daemon-nonroot

Jul 11, 2026

Commits on Jul 11, 2026

mesh: run the nvpn daemon as a dedicated non-root user (contains a boringtun/Nostr RCE)
kwsantiago
committed
e253688
mesh: assert stateDir disjoint from frostGate.dataDir (guard the ExecStartPre chown)
kwsantiago
committed
d2ec832