https://github.com/kizzycode/sandboxexec
This program allows you to execute a binary in a sandbox
https://github.com/kizzycode/sandboxexec
Last synced: about 2 months ago
JSON representation
This program allows you to execute a binary in a sandbox
- Host: GitHub
- URL: https://github.com/kizzycode/sandboxexec
- Owner: KizzyCode
- Created: 2018-07-04T16:22:58.000Z (almost 7 years ago)
- Default Branch: master
- Last Pushed: 2018-07-17T15:55:12.000Z (almost 7 years ago)
- Last Synced: 2025-02-06T04:44:16.734Z (3 months ago)
- Language: Rust
- Size: 10.7 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE BSD-2-CLAUSE.md
Awesome Lists containing this project
README
SandboxExec
===========
Welcome to SandboxExec 🎉
What is SandboxExec?
--------------------
SandboxExec is a CLI-tool that allows you to execute other binaries in a sandbox.
It comes with the following profiles:
- DenyDefault
- AllowReadWorkingDir
- AllowWriteWorkingDir
- AllowReadAll
- AllowWriteAll
- AllowNetwork
How can I build SandboxExec?
----------------------------
Just clone the repository, change into the projects root directory and run `cargo build --release`.
You can find the resulting binary in `target/release`.
How do I use SandboxExec?
-------------------------
SandboxExec is configured using environment variables. There are two obligatory variables:
- `SANDBOX_EXEC_BINARY`: The path to the binary to execute
- `SANDBOX_EXEC_PROFILE`: A comma-separated string containing the sandbox profile-names
There is also a third environment-variable `SANDBOX_EXEC_DEBUG` which enables the debug mode if it
is defined.
All other environment variables and command line arguments are passed to the child.