zerobox 0.2.3

Sandbox any command with file, network, and credential controls.
{
  "$schema": "./schema.json",
  "description": "macOS system paths for program execution.",
  "platform": "macos",
  "allow_read": [
    "/bin",
    "/sbin",
    "/usr/bin",
    "/usr/sbin",
    "/usr/local/bin",
    "/usr/lib",
    "/usr/local/lib",
    "/usr/share",
    "/System/Library",
    "/Library",
    "/Library/Frameworks",
    "/private/var/db/dyld",
    "/var/db/dyld",
    "/var/db",
    "/private/etc/ssl",
    "/etc/ssl",
    "/etc",
    "/private/etc",
    "/usr/share/zoneinfo",
    "/usr/share/locale",
    "/var/db/timezone",
    "/usr/share/terminfo",
    "/var",
    "/private/var",
    "/private",
    "/tmp",
    "/System/Volumes",
    "/System/Cryptexes",
    "/Applications",
    "/cores",
    "/opt",
    "/Volumes",
    "/run",
    "/nix"
  ]
}