Skip to content

Commit

Permalink
Merge branch 'main' of github.com:ossillate-inc/packj into main
Browse files Browse the repository at this point in the history
  • Loading branch information
ashishbijlani committed Feb 1, 2023

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
2 parents 120a959 + 5821ac3 commit 8b915bf
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion packj/sandbox/README.md
Original file line number Diff line number Diff line change
@@ -59,7 +59,7 @@ arguments:

## How it works ##

Packj sandbox creates a network firewall and an isolated filesystem layer by interposing on system calls (e.g., `open`, `connect`) with [strace](https://github.com/strace/strace) and re-writing system calls arguments (e.g., file path) as per the sandboxing rules in `config.yaml`. Rewriting ensures that all file system modifications are confined to the isolated layer. As a result, the requested package is **ONLY** installed in the sandboxed file system. All network and file system activities are logged. At the end, the user can review these activities before commiting to the host filesystem to **actually** install the package (i.e., copy artifacts).
Packj sandbox creates a network firewall and an isolated filesystem layer by interposing on system calls (e.g., `open`, `connect`) with [strace](https://github.com/strace/strace) and re-writing system calls arguments (e.g., file path) as per the sandboxing rules in `.packj.yaml`. Rewriting ensures that all file system modifications are confined to the isolated layer. As a result, the requested package is **ONLY** installed in the sandboxed file system. All network and file system activities are logged. At the end, the user can review these activities before commiting to the host filesystem to **actually** install the package (i.e., copy artifacts).

```
$ python3 main.py sandbox gem install overcommit

0 comments on commit 8b915bf

Please sign in to comment.