From 5db07140726e6e1bf615ed075e9a8b653508c2a7 Mon Sep 17 00:00:00 2001
From: Clayton Gilmer <netadr_t@outlook.com>
Date: Mon, 18 Aug 2025 12:00:52 +0900
Subject: container: optionally isolate host abstract UNIX domain sockets via
 landlock

---
 internal/app/container_linux.go | 1 +
 1 file changed, 1 insertion(+)

(limited to 'internal/app/container_linux.go')

diff --git a/internal/app/container_linux.go b/internal/app/container_linux.go
index 3f1259fd..7f088192 100644
--- a/internal/app/container_linux.go
+++ b/internal/app/container_linux.go
@@ -33,6 +33,7 @@ func newContainer(s *hst.ContainerConfig, os sys.State, prefix string, uid, gid
 		SeccompPresets: s.SeccompPresets,
 		RetainSession:  s.Tty,
 		HostNet:        s.Net,
+		HostAbstract:   s.Abstract,
 
 		// the container is canceled when shim is requested to exit or receives an interrupt or termination signal;
 		// this behaviour is implemented in the shim
-- 
cgit v1.3.1