diff options
Diffstat (limited to 'internal/pkg/pkg.go')
| -rw-r--r-- | internal/pkg/pkg.go | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/internal/pkg/pkg.go b/internal/pkg/pkg.go index ccb7541e..1ecd4b5c 100644 --- a/internal/pkg/pkg.go +++ b/internal/pkg/pkg.go @@ -521,6 +521,14 @@ const ( // was caused by an incorrect checksum accidentally left behind while // bumping a package. Only enable this if you are really sure you need it. CAssumeChecksum + + // CHostAbstract disables restriction of sandboxed processes from connecting + // to an abstract UNIX socket created by a host process. + // + // This is considered less secure in some systems, but does not introduce + // impurity due to [KindExecNet] being [KnownChecksum]. This flag exists + // to support kernels without Landlock LSM enabled. + CHostAbstract ) // Cache is a support layer that implementations of [Artifact] can use to store |