maemachinebroke/hakurei
1
0
Fork 0
forked from security/hakurei
Code Pull Requests Activity

system/dbus: share host net ns for abstract

Browse Source 
Host abstract unix sockets are only accessible when also in the init net ns.

Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra
2025-08-21 21:55:23 +09:00
parent 5b73316ae0
commit d500d6e559
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
system/dbus/proc.go
View File

@@ -98,9 +98,8 @@ func (p *Proxy) Start() error {
for _, name := range upstreamPaths { for _, name := range upstreamPaths {
z.Bind(name, name, 0) z.Bind(name, name, 0)
} }
if len(upstreamPaths) == 0 { z.HostNet = len(upstreamPaths) == 0
z.HostAbstract = true z.HostAbstract = z.HostNet
}
// parent directories of bind paths // parent directories of bind paths
sockDirPaths := make([]*container.Absolute, 0, 2) sockDirPaths := make([]*container.Absolute, 0, 2)