From 5db07140726e6e1bf615ed075e9a8b653508c2a7 Mon Sep 17 00:00:00 2001 From: Clayton Gilmer Date: Mon, 18 Aug 2025 12:00:52 +0900 Subject: container: optionally isolate host abstract UNIX domain sockets via landlock --- test/sandbox/case/mapuid.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'test/sandbox/case/mapuid.nix') diff --git a/test/sandbox/case/mapuid.nix b/test/sandbox/case/mapuid.nix index 18d82e77..3ef5f247 100644 --- a/test/sandbox/case/mapuid.nix +++ b/test/sandbox/case/mapuid.nix @@ -269,7 +269,7 @@ in seccomp = true; try_socket = "/tmp/.X11-unix/X0"; - socket_abstract = true; + socket_abstract = false; socket_pathname = false; }; } -- cgit v1.3.1