57 lines
1011 B
YAML
57 lines
1011 B
YAML
# Sample minimal-permission sandbox for execute_code
|
|
filesystem:
|
|
ro:
|
|
- "/etc/alternatives"
|
|
- "/etc/ld.so.cache"
|
|
- "/etc/passwd"
|
|
- "/dev/urandom"
|
|
rox:
|
|
- "/usr"
|
|
- "/lib"
|
|
- "/lib64"
|
|
- "/bin"
|
|
- "{HOME}/go/bin"
|
|
- "{HOME}/bin"
|
|
- "{HOME}/.local/bin"
|
|
- "{HOME}/opt"
|
|
- "{PLAN9}/bin"
|
|
- "{HOME}/.pyenv"
|
|
- "{HOME}/.rbenv"
|
|
- "{HOME}/.nvm"
|
|
rw:
|
|
- "{OLLIE_MEMORY_PATH}"
|
|
- "{OLLIE_PLAN_PATH}"
|
|
- "/dev/null"
|
|
- "/tmp"
|
|
- "{NAMESPACE}"
|
|
- "{XDG_RUNTIME_DIR}/ollie"
|
|
rwx:
|
|
- "{CWD}"
|
|
- "{OLLIE}"
|
|
- "{HOME}/notes"
|
|
env:
|
|
- NAMESPACE
|
|
- OLLIE
|
|
- OLLIE_CFG_PATH
|
|
- OLLIE_DATA_PATH
|
|
- OLLIE_MEMORY_PATH
|
|
- OLLIE_PLAN_PATH
|
|
- OLLIE_SESSION_ID
|
|
- OLLIE_SKILLS_PATH
|
|
- OLLIE_TMP_PATH
|
|
- OLLIE_ELEVATE_SOCKET
|
|
- OLLIE_TOOLS_PATH
|
|
- OLLIE_TRANSCRIPT_PATH
|
|
- PATH
|
|
- HOME
|
|
- PLAN9
|
|
- DISPLAY
|
|
- DBUS_SESSION_BUS_ADDRESS
|
|
- WAYLAND_DISPLAY
|
|
- USER
|
|
- AGENT_ID
|
|
- XDG_RUNTIME_DIR
|
|
- TMPDIR
|
|
network:
|
|
unrestricted: true
|