Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Network/PID/user sandbox on by default? #907

Open
copumpkin opened this issue May 17, 2016 · 6 comments
Open

Network/PID/user sandbox on by default? #907

copumpkin opened this issue May 17, 2016 · 6 comments
Assignees
@copumpkin
Labels
feature Feature request or proposal stale

Comments

@copumpkin
Copy link
Member

copumpkin commented May 17, 2016 •
edited
Loading

I know that setting up bind mounts is slow on Linux so we keep sandboxes off by default, but doing the network/PID/user namespacing seems cheap and improves purity at virtually no cost.
@domenkozar domenkozar added the feature Feature request or proposal label May 30, 2016
@copumpkin
Copy link
Member Author

cc @edolstra @shlevy

@shlevy
Copy link
Member

shlevy commented Sep 12, 2016

👍

@copumpkin copumpkin mentioned this issue Nov 22, 2016
Closed
@copumpkin copumpkin mentioned this issue Jan 3, 2017
Closed
@chris-martin
Copy link
Contributor

Disabling network access would be a huge help.

@shlevy shlevy added the backlog label Apr 1, 2018
@stale
Copy link

stale bot commented Feb 15, 2021

I marked this as stale due to inactivity. → More info

@stale stale bot added the stale label Feb 15, 2021
@stale
Copy link

stale bot commented May 2, 2022

I closed this issue due to inactivity. → More info

@stale stale bot closed this as completed May 2, 2022
@edolstra
Copy link
Member

edolstra commented May 2, 2022

FWIW, sandboxing is enabled by default these days.

@thufschmitt thufschmitt reopened this Feb 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@copumpkin copumpkin

Labels
feature Feature request or proposal stale
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
6 participants
@copumpkin @domenkozar @chris-martin @shlevy @edolstra @thufschmitt