From acb6931f3e4af62f92dc2ef85ef7c1ac9f7867e4 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Wed, 27 Aug 2025 20:40:30 +0900 Subject: app/seal: leave $DISPLAY as is on host abstract This helps work around faulty software that misinterprets unix: DISPLAY string. Signed-off-by: Ophestra --- test/sandbox/case/tty.nix | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'test/sandbox/case/tty.nix') diff --git a/test/sandbox/case/tty.nix b/test/sandbox/case/tty.nix index f06a9068..feb48337 100644 --- a/test/sandbox/case/tty.nix +++ b/test/sandbox/case/tty.nix @@ -35,6 +35,7 @@ in useCommonPaths = true; userns = false; x11 = true; + hostAbstract = true; # 0, PresetExt | PresetDenyNS | PresetDenyDevel expectedFilter = { @@ -45,7 +46,7 @@ in want = { env = [ "DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/65534/bus" - "DISPLAY=unix:/tmp/.X11-unix/X0" + "DISPLAY=:0" "HOME=/var/lib/hakurei/u0/a2" "PULSE_SERVER=unix:/run/user/65534/pulse/native" "SHELL=/run/current-system/sw/bin/bash" @@ -276,7 +277,7 @@ in seccomp = true; try_socket = "/tmp/.X11-unix/X0"; - socket_abstract = false; + socket_abstract = true; socket_pathname = true; }; } -- cgit v1.3.1