Module sandboxing

Expand description

Sandboxing module for VT Code

Re-exported from vtcode-safety for backward compatibility.

Structs§

AdditionalPermissions: Additional per-command filesystem permissions.
CommandSpec: Specification for a command to be executed.
ExecEnv: The prepared execution environment after sandbox transformation.
LinuxSandboxLauncher: How the Linux sandbox helper binary is invoked.
NetworkAllowlistEntry: Network allowlist entry for domain-based egress control.
ResourceLimits: Resource limits for sandboxed execution.
SandboxDebugResult: Result of a sandbox debug test.
SandboxManager: Manager for sandbox transformation.
SeccompProfile: Seccomp profile configuration for Linux sandboxing.
SensitivePath: Sensitive path entry for blocking access to credential locations.
WritableRoot: A root directory that may be written to under the sandbox policy.

DebugSubcommand: Debug subcommand types for CLI integration.
ExecExpiration: Mechanism to terminate an exec invocation before it finishes naturally.
SandboxPermissions: Fine-grained permissions for sandbox operations.
SandboxPolicy: Sandbox policy determining what operations are permitted during execution.
SandboxTransformError: Error type for sandbox transformation failures.
SandboxType: Type of sandbox being used.

BLOCKED_SYSCALLS: Syscalls that should be blocked in seccomp-bpf profiles.
DEFAULT_SENSITIVE_PATHS: Default sensitive paths that should be blocked from sandboxed processes.
FILTERED_ENV_VARS: Environment variables that should be filtered from sandboxed processes.
FILTERED_SYSCALLS: Syscalls that require argument filtering (not fully blocked).
PRESERVED_ENV_VARS: Environment variables that should always be preserved.
SECCOMP_PROFILE_VERSION: Version of the seccomp blocklist schema compiled into this binary.
VTCODE_SANDBOX_ACTIVE: Sandbox environment markers set for child processes.
VTCODE_SANDBOX_NETWORK_DISABLED
VTCODE_SANDBOX_TYPE
VTCODE_SANDBOX_WRITABLE_ROOTS

apply_sandbox_restrictions: Apply every kernel-level restriction of the sandbox policy to the current process: resource limits, then Landlock filesystem rules, then seccomp.
build_sanitized_env: Build a sanitized environment for sandboxed child processes.
debug_sandbox: Debug sandbox configuration by running a test command.
default_sensitive_paths: Get the default sensitive paths as SensitivePath entries.
filter_sensitive_env: Filter sensitive environment variables from an existing map.
landlock_supported: Probe whether the running kernel enforces Landlock (ABI >= 1, Linux 5.13+).
sandbox_capabilities_summary: Get a human-readable summary of sandbox capabilities for the current platform.
setup_parent_death_signal: Set up parent death signal on Linux.
should_filter_env_var: Check if an environment variable should be filtered.
test_network_blocked: Test if network access is blocked under the given sandbox policy.
test_path_writable: Test if a specific path is writable under the given sandbox policy.