Skip to main content

codex_linux_sandbox/
lib.rs

1//! Linux sandbox helper entry point.
2//!
3//! On Linux, `codex-linux-sandbox` applies:
4//! - in-process restrictions (`no_new_privs` + seccomp), and
5//! - bubblewrap for filesystem isolation.
6#[cfg(target_os = "linux")]
7mod bazel_bwrap;
8#[cfg(target_os = "linux")]
9mod bundled_bwrap;
10#[cfg(target_os = "linux")]
11mod bwrap;
12#[cfg(target_os = "linux")]
13mod exec_util;
14#[cfg(target_os = "linux")]
15mod landlock;
16#[cfg(target_os = "linux")]
17mod launcher;
18#[cfg(target_os = "linux")]
19mod linux_run_main;
20#[cfg(target_os = "linux")]
21mod proxy_routing;
22
23#[cfg(target_os = "linux")]
24pub fn run_main() -> ! {
25    linux_run_main::run_main();
26}
27
28#[cfg(not(target_os = "linux"))]
29pub fn run_main() -> ! {
30    panic!("codex-linux-sandbox is only supported on Linux");
31}