zerobox 0.2.3

Sandbox any command with file, network, and credential controls.
{
  "$schema": "./schema.json",
  "description": "Linux system paths for program execution.",
  "platform": "linux",
  "allow_read": [
    "/bin",
    "/sbin",
    "/usr/bin",
    "/usr/sbin",
    "/usr/local/bin",
    "/lib",
    "/lib64",
    "/lib/x86_64-linux-gnu",
    "/lib/aarch64-linux-gnu",
    "/usr/lib",
    "/usr/lib64",
    "/usr/lib/x86_64-linux-gnu",
    "/usr/lib/aarch64-linux-gnu",
    "/usr/local/lib",
    "/usr/local/lib64",
    "/etc/resolv.conf",
    "/etc/hosts",
    "/etc/nsswitch.conf",
    "/etc/gai.conf",
    "/etc/ssl",
    "/etc/ca-certificates",
    "/etc/ld.so.cache",
    "/etc/ld.so.conf",
    "/etc/ld.so.conf.d",
    "/etc/localtime",
    "/etc/timezone",
    "/etc/locale.conf",
    "/etc/locale.gen",
    "/etc/alternatives",
    "/etc/os-release",
    "/etc/services",
    "/usr/share",
    "/usr/share/locale",
    "/usr/share/locale-langpack",
    "/usr/share/zoneinfo",
    "/usr/share/terminfo",
    "/usr/share/ca-certificates",
    "/lib/terminfo",
    "/etc/terminfo",
    "/tmp"
  ]
}