go-sandbox/pkg/forkexec/test.sb
2020-05-15 19:01:10 -04:00

22 lines
322 B
Plaintext

; Test Sandbox Profile
; No network / socket
; No system / sysctl
(version 1)
(deny default)
; allow posix ipc
(allow ipc-posix*)
; allow file access /
(allow file-read* (subpath "/usr/lib"))
; allow execve
(allow process-exec)
; allow fork
(allow process-fork)
; allow signal to self
(allow signal (target self))