From 5db07140726e6e1bf615ed075e9a8b653508c2a7 Mon Sep 17 00:00:00 2001
From: Clayton Gilmer <netadr_t@outlook.com>
Date: Mon, 18 Aug 2025 12:00:52 +0900
Subject: container: optionally isolate host abstract UNIX domain sockets via
 landlock

---
 test/sandbox/case/pd.nix | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'test/sandbox/case/pd.nix')

diff --git a/test/sandbox/case/pd.nix b/test/sandbox/case/pd.nix
index 79400f53..49230bcf 100644
--- a/test/sandbox/case/pd.nix
+++ b/test/sandbox/case/pd.nix
@@ -194,5 +194,9 @@
     ];
 
     seccomp = true;
+
+    try_socket = "/tmp/.X11-unix/X0";
+    socket_abstract = true;
+    socket_pathname = false;
   };
 }
-- 
cgit v1.3.1