mirror of
https://github.com/criyle/go-sandbox.git
synced 2025-11-04 14:49:53 +08:00
22 lines
322 B
Plaintext
22 lines
322 B
Plaintext
; Test Sandbox Profile
|
|
; No network / socket
|
|
; No system / sysctl
|
|
(version 1)
|
|
|
|
(deny default)
|
|
|
|
; allow posix ipc
|
|
(allow ipc-posix*)
|
|
|
|
; allow file access /
|
|
(allow file-read* (subpath "/usr/lib"))
|
|
|
|
; allow execve
|
|
(allow process-exec)
|
|
|
|
; allow fork
|
|
(allow process-fork)
|
|
|
|
; allow signal to self
|
|
(allow signal (target self))
|