3 ms·

We never solved the restricted shell problem for humans.

• jimbokun 1mo ago
  Can you elaborate? Read, write, execute privileges on files and directories goes a long way. What's missing? The biggest is Internet access, or networking in general, I suppose.
  • cryptonector 1mo ago
    Two problems. First, it is remarkably difficult to come up with a set of programs that it is safe to let the restricted user use. Second, it is remarkably difficult to make the restricted environment useful enough if you're really serious about allowing only safe programs to be used. Try to make it useful enough and you end up with escapes everywhere.
    • jimbokun 1mo ago
      Sure but then the file protections also apply to the programs used by the agent. If you can strictly limit the agent to only modifying files in the source code directory of a single repository, that greatly limits the blast radius of damage.
      • cryptonector 1mo ago
        But that's not useful. That's the problem.