diff options
| author | Clayton Gilmer <netadr_t@outlook.com> | 2025-08-18 12:00:52 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-08-18 16:28:14 +0900 |
| commit | 5db07140726e6e1bf615ed075e9a8b653508c2a7 (patch) | |
| tree | 15cdb5ed164ec5cdc32527f87ee969ad704cdd11 /system | |
| parent | 69a4ab81053ef31d745ac0d92531cefb7d3a3e44 (diff) | |
container: optionally isolate host abstract UNIX domain sockets via landlock
Diffstat (limited to 'system')
| -rw-r--r-- | system/dbus/proc.go | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/system/dbus/proc.go b/system/dbus/proc.go index 0e5f1cef..6607ef19 100644 --- a/system/dbus/proc.go +++ b/system/dbus/proc.go @@ -64,6 +64,10 @@ func (p *Proxy) Start() error { argF, func(z *container.Container) { z.SeccompFlags |= seccomp.AllowMultiarch z.SeccompPresets |= seccomp.PresetStrict + + // xdg-dbus-proxy fails with scoped abstract unix sockets despite pathname socket being available + z.HostAbstract = true + z.Hostname = "hakurei-dbus" if p.output != nil { z.Stdout, z.Stderr = p.output, p.output |