diff options
| author | Clayton Gilmer <netadr_t@outlook.com> | 2025-08-18 12:00:52 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-08-18 16:28:14 +0900 |
| commit | 5db07140726e6e1bf615ed075e9a8b653508c2a7 (patch) | |
| tree | 15cdb5ed164ec5cdc32527f87ee969ad704cdd11 /test/sandbox | |
| parent | 69a4ab81053ef31d745ac0d92531cefb7d3a3e44 (diff) | |
container: optionally isolate host abstract UNIX domain sockets via landlock
Diffstat (limited to 'test/sandbox')
| -rw-r--r-- | test/sandbox/case/device.nix | 2 | ||||
| -rw-r--r-- | test/sandbox/case/mapuid.nix | 2 | ||||
| -rw-r--r-- | test/sandbox/case/pd.nix | 4 | ||||
| -rw-r--r-- | test/sandbox/case/pdlike.nix | 2 | ||||
| -rw-r--r-- | test/sandbox/case/preset.nix | 2 | ||||
| -rw-r--r-- | test/sandbox/case/tty.nix | 2 |
6 files changed, 9 insertions, 5 deletions
diff --git a/test/sandbox/case/device.nix b/test/sandbox/case/device.nix index e9cf724b..c1a2f5f5 100644 --- a/test/sandbox/case/device.nix +++ b/test/sandbox/case/device.nix @@ -243,7 +243,7 @@ in seccomp = true; try_socket = "/tmp/.X11-unix/X0"; - socket_abstract = true; + socket_abstract = false; socket_pathname = true; }; } diff --git a/test/sandbox/case/mapuid.nix b/test/sandbox/case/mapuid.nix index 18d82e77..3ef5f247 100644 --- a/test/sandbox/case/mapuid.nix +++ b/test/sandbox/case/mapuid.nix @@ -269,7 +269,7 @@ in seccomp = true; try_socket = "/tmp/.X11-unix/X0"; - socket_abstract = true; + socket_abstract = false; socket_pathname = false; }; } diff --git a/test/sandbox/case/pd.nix b/test/sandbox/case/pd.nix index 79400f53..49230bcf 100644 --- a/test/sandbox/case/pd.nix +++ b/test/sandbox/case/pd.nix @@ -194,5 +194,9 @@ ]; seccomp = true; + + try_socket = "/tmp/.X11-unix/X0"; + socket_abstract = true; + socket_pathname = false; }; } diff --git a/test/sandbox/case/pdlike.nix b/test/sandbox/case/pdlike.nix index da6753f8..ea341478 100644 --- a/test/sandbox/case/pdlike.nix +++ b/test/sandbox/case/pdlike.nix @@ -264,7 +264,7 @@ in seccomp = true; try_socket = "/tmp/.X11-unix/X0"; - socket_abstract = true; + socket_abstract = false; socket_pathname = false; }; } diff --git a/test/sandbox/case/preset.nix b/test/sandbox/case/preset.nix index be376a17..41f612f8 100644 --- a/test/sandbox/case/preset.nix +++ b/test/sandbox/case/preset.nix @@ -262,7 +262,7 @@ in seccomp = true; try_socket = "/tmp/.X11-unix/X0"; - socket_abstract = true; + socket_abstract = false; socket_pathname = false; }; } diff --git a/test/sandbox/case/tty.nix b/test/sandbox/case/tty.nix index ff7bf035..d95cbb83 100644 --- a/test/sandbox/case/tty.nix +++ b/test/sandbox/case/tty.nix @@ -275,7 +275,7 @@ in seccomp = true; try_socket = "/tmp/.X11-unix/X0"; - socket_abstract = true; + socket_abstract = false; socket_pathname = true; }; } |