3 ms·
> Also not sure if it can be dynamically set by a parent process for a child? Yes, it can. See sandbox-exec tool. And I actually plan to use it: https://github
by slonopotamus 3y ago
> Also not sure if it can be dynamically set by a parent process for a child?
Yes, it can. See sandbox-exec tool. And I actually plan to use it: https://github.com/macOScontainers/rund/issues/15 https://github.com/macOScontainers/rund/issues/15
- lloeki 3y agoOh my I totally forgot about sandbox-exec! I played with it some time ago, can't recall the context but it was about build systems / packaging (maybe nix?), doing the configure/make/make install with reduced privileges.