typeduck-codex-execpolicy 0.12.0

Support package for the standalone Codex Web runtime (codex-process-hardening)
Documentation
1
2
3
4
5
6
7
# codex-process-hardening

This crate provides `pre_main_hardening()`, which is designed to be called pre-`main()` (using `#[ctor::ctor]`) to perform various process hardening steps, such as

- disabling core dumps
- disabling ptrace attach on Linux and macOS
- removing dangerous environment variables such as `LD_PRELOAD` and `DYLD_*`