scan.cfg

name: "scan"

description: "cargo audit nsjail profile"

mode: ONCE

rlimit_as_type: HARD
rlimit_core_type: HARD
rlimit_cpu_type: HARD
rlimit_fsize_type: HARD
rlimit_nofile_type: HARD
rlimit_nproc_type: HARD
rlimit_stack_type: HARD
clone_newnet: false

mount {
        src: "/"
        dst: "/"
        rw: false
        is_bind: true
}

mount {
        dst: "/tmp"
        fstype: "tmpfs"
        rw: true
        is_bind: false
}

mount {
        dst: "/var/tmp"
        fstype: "tmpfs"
        rw: true
        is_bind: false
}

mount {
        src: "/dev/null"
        dst: "/dev/null"
        rw: true
        is_bind: true
}

mount {
    src: "/dev/urandom"
    dst: "/dev/urandom"
    is_bind: true
    rw: true
}