From 5db07140726e6e1bf615ed075e9a8b653508c2a7 Mon Sep 17 00:00:00 2001 From: Clayton Gilmer Date: Mon, 18 Aug 2025 12:00:52 +0900 Subject: container: optionally isolate host abstract UNIX domain sockets via landlock --- cmd/hpkg/app.go | 3 +++ 1 file changed, 3 insertions(+) (limited to 'cmd') diff --git a/cmd/hpkg/app.go b/cmd/hpkg/app.go index 67d12496..713a4fc7 100644 --- a/cmd/hpkg/app.go +++ b/cmd/hpkg/app.go @@ -28,6 +28,8 @@ type appInfo struct { // passed through to [hst.Config] Net bool `json:"net,omitempty"` // passed through to [hst.Config] + Abstract bool `json:"abstract,omitempty"` + // passed through to [hst.Config] Device bool `json:"dev,omitempty"` // passed through to [hst.Config] Tty bool `json:"tty,omitempty"` @@ -87,6 +89,7 @@ func (app *appInfo) toHst(pathSet *appPathSet, pathname *container.Absolute, arg Devel: app.Devel, Userns: app.Userns, Net: app.Net, + Abstract: app.Abstract, Device: app.Device, Tty: app.Tty || flagDropShell, MapRealUID: app.MapRealUID, -- cgit v1.3.1