From 5db07140726e6e1bf615ed075e9a8b653508c2a7 Mon Sep 17 00:00:00 2001 From: Clayton Gilmer Date: Mon, 18 Aug 2025 12:00:52 +0900 Subject: container: optionally isolate host abstract UNIX domain sockets via landlock --- hst/config.go | 2 ++ 1 file changed, 2 insertions(+) (limited to 'hst') diff --git a/hst/config.go b/hst/config.go index 34100e4f..d6f07be0 100644 --- a/hst/config.go +++ b/hst/config.go @@ -79,6 +79,8 @@ type ( Userns bool `json:"userns,omitempty"` // share host net namespace Net bool `json:"net,omitempty"` + // share abstract unix socket scope + Abstract bool `json:"abstract,omitempty"` // allow dangerous terminal I/O Tty bool `json:"tty,omitempty"` // allow multiarch -- cgit v1.3.1