No description
  • Shell 94.7%
  • Makefile 5.3%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
2026-10-15 16:59:10 +02:00
LICENSE add readme 2026-09-02 18:15:43 +02:00
Makefile sandbox_claude 2026-10-13 19:31:22 +02:00
README.md add readme 2026-09-02 18:15:43 +02:00
sandbox disable weston virtual keyboard 2026-10-15 16:59:10 +02:00
sandbox.desktop desktop file for temporary sandbox 2026-09-15 15:29:20 +02:00
sandbox_claude use custom weston config 2026-10-15 01:03:12 +02:00
sandbox_code full internet access for sandbox_code 2026-10-15 16:35:05 +02:00
sandbox_open use custom weston config 2026-10-15 01:03:12 +02:00

Sandbox

A script for sandboxing desktop apps using bwrap.

Examples

A shell with access to the current directory but nothing else:

sandbox

ssh with access to the internet and the current directory:

INTERNET=y sandbox ssh user@example

vlc with untrusted access to the X server (quite slow):

X11=y AUDIO=y sandbox vlc

vlc with full access to the X server:

X11=y X11_TRUSTED=y X11_DRI=y AUDIO=y sandbox vlc

Okular running in weston:

WESTON=y sandbox okular test.pdf

Okular running in Xephyr:

XEPHYR=y sandbox okular test.pdf