Skip to content

Instantly share code, notes, and snippets.

@psobot
Created August 25, 2012 21:33
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save psobot/3471177 to your computer and use it in GitHub Desktop.
Save psobot/3471177 to your computer and use it in GitHub Desktop.
Read-only network-free command sandbox
;; Read-only, network-free sandbox
;; Mac OS X 10.7+
;; Restricts file writes and network access for any command run like:
;; sandbox-exec -f ronf.sb <command>
;; Useful for untrusted programs that should only do computation.
(version 1)
(allow default)
(deny file-write*)
(deny network*)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment