mirror of
https://github.com/trailofbits/algo.git
synced 2026-09-22 01:24:58 +02:00
56cd17b21a
Preparatory work for issue #14810 (stroke to swanctl migration). This change adds AF_UNIX to the allowed socket address families in the StrongSwan SystemD service hardening configuration. This is required for the VICI socket (/var/run/charon.vici) that swanctl uses to communicate with the charon daemon. The change is: - Backward-compatible (doesn't affect current stroke interface) - Zero-risk (additive change only) - Future-proof (enables eventual swanctl migration) Full migration is deferred until Ubuntu 26.04 approaches, per research findings documented in #14810. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude <noreply@anthropic.com>