From 5db07140726e6e1bf615ed075e9a8b653508c2a7 Mon Sep 17 00:00:00 2001
From: Clayton Gilmer <netadr_t@outlook.com>
Date: Mon, 18 Aug 2025 12:00:52 +0900
Subject: container: optionally isolate host abstract UNIX domain sockets via
 landlock

---
 options.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'options.nix')

diff --git a/options.nix b/options.nix
index a51609c9..ec2533c0 100644
--- a/options.nix
+++ b/options.nix
@@ -182,6 +182,7 @@ in
               net = mkEnableOption "network access" // {
                 default = true;
               };
+              abstract = mkEnableOption "abstract unix domain socket access";
 
               nix = mkEnableOption "nix daemon access";
               mapRealUid = mkEnableOption "mapping to priv-user uid";
-- 
cgit v1.3.1