Update restrictions.yaml with Unix socket rule

Added restriction for reverse tunnel on Unix socket.
2025-12-24 13:47:51 +08:00 · 2025-11-26 09:10:19 +01:00
parent fa02660cf1
commit 97ddf47978
1 changed files with 10 additions and 0 deletions
--- a/restrictions.yaml
+++ b/restrictions.yaml
@@ -59,6 +59,7 @@ restrictions:
        cidr:
          - 0.0.0.0/0
          - ::/0
+        unix_path: "^.*$"

 ---
 # Examples
@@ -116,3 +117,12 @@ restrictions:
    match:
      - !Any
    allow: []
+---
+restrictions:
+  - name: "example 6"
+    description: "Allow reverse tunnel for Unix socket on /tmp/xxxx "
+    match:
+      - !Any
+    allow:
+      - !ReverseTunnel
+        unix_path: "^/tmp/"