Repository navigation
feat(sandbox): apply per-process CPU/memory/file-size rlimits inside bubblewrap - #25
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Build on #24 with explicit Linux subprocess resource ceilings using trusted util-linux
prlimitinside the isolated mount namespace.sandbox_cpu_seconds(default 30),sandbox_memory_mb(default 1024 MiB), andsandbox_file_mb(default 32 MiB) exposed via AgentConfig and CLI flags.prlimitfrom system paths, refuse to execute if unavailable. No execution fallback.--cpu,--as,--fsizethrough an exec argv wrapper; untrusted command text remains the final/bin/sh -cargument, not part of flags.Scope caveat: RLIMIT_CPU and RLIMIT_AS are per process, NOT aggregate cgroup quotas; the existing executor timeout still controls wall-clock duration. This does not provide a complete multi-process memory/CPU quota or a kernel security boundary.