jrpie/sandbox
Watch
1
0
Fork
You've already forked sandbox
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
23 commits 1 branch 0 tags 118 KiB
  • Shell 95.2%
  • Makefile 4.8%
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Josia Pietsch b501f9b91d
 option to share unsafe paths
2026-10-31 20:37:50 +01:00
LICENSE add readme 2026-09-02 18:15:43 +02:00
Makefile sandbox_code_wl 2026-10-17 14:21:11 +02:00
README.md add readme 2026-09-02 18:15:43 +02:00
sandbox option to share unsafe paths 2026-10-31 20:37:50 +01:00
sandbox.desktop desktop file for temporary sandbox 2026-09-15 15:29:20 +02:00
sandbox_claude use custom weston config 2026-10-15 01:03:12 +02:00
sandbox_code full internet access for sandbox_code 2026-10-15 16:35:05 +02:00
sandbox_code_wl add config file 2026-10-17 14:20:38 +02:00
sandbox_open add config file 2026-10-17 14:20:38 +02:00

README.md

Sandbox

A script for sandboxing desktop apps using bwrap.

Examples

A shell with access to the current directory but nothing else:

sandbox

ssh with access to the internet and the current directory:

INTERNET=y sandbox ssh user@example

vlc with untrusted access to the X server (quite slow):

X11=y AUDIO=y sandbox vlc

vlc with full access to the X server:

X11=y X11_TRUSTED=y X11_DRI=y AUDIO=y sandbox vlc

Okular running in weston:

WESTON=y sandbox okular test.pdf

Okular running in Xephyr:

XEPHYR=y sandbox okular test.pdf