{"version":"2.1.304","anchor":"sandbox-allowallunixsockets-description-notes-it-also-unbloc","canonical_anchor":"sandbox-allowallunixsockets-description-notes-it-also-unbloc","heading":"allowAllUnixSockets description warns it also opens VM sockets on Linux","tier":"notice","area":"Sandbox","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.304\/e\/sandbox-allowallunixsockets-description-notes-it-also-unbloc","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.304","markdown":"### `allowAllUnixSockets` description warns it also opens VM sockets on Linux\n\nThe `allowAllUnixSockets` sandbox setting is now described as also unblocking VM sockets (AF_VSOCK) on Linux\n\n**What**\n\nThe sandbox setting `allowAllUnixSockets` lets sandboxed commands use any Unix socket, a channel programs on the same machine use to talk to each other. Its description now adds that on Linux it also unblocks VM sockets (AF_VSOCK), which let a virtual machine talk to the machine hosting it.\n\n**Why**\n\nTurning this setting on opens more than its name suggests on Linux, so weigh that before enabling it.\n\n- Area: Sandbox\n- Names: `allowAllUnixSockets`\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5\n- Scope: individual\n- Heads-up: no"}