jcarr
/
gemini-cli
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

adjust seatbelt to allow write into specific dirs under user home (#289)

This commit is contained in:
Olcan 2025-05-08 11:28:45 -07:00 committed by GitHub
parent 448a24746c
commit b59a940057
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
packages/cli/src/utils/sandbox-macos-minimal.sb
View File

@ -3,13 +3,14 @@
;; allow everything by default ;; allow everything by default
(allow default) (allow default)
;; deny all writes EXCEPT under project directory, temp directory, stdout/stderr and /dev/null ;; deny all writes EXCEPT under specific paths
(deny file-write*) (deny file-write*)
(allow file-write* (allow file-write*
(subpath (param "TARGET_DIR")) (subpath (param "TARGET_DIR"))
(subpath (param "TMP_DIR")) (subpath (param "TMP_DIR"))
(subpath (string-append (param "HOME_DIR") "/.gemini"))
(subpath (string-append (param "HOME_DIR") "/.npm"))
(literal "/dev/stdout") (literal "/dev/stdout")
(literal "/dev/stderr") (literal "/dev/stderr")
(literal "/dev/null") (literal "/dev/null")
) )

2
packages/cli/src/utils/sandbox-macos-strict.sb
View File

@ -66,6 +66,8 @@
(allow file-write* (allow file-write*
(subpath (param "TARGET_DIR")) (subpath (param "TARGET_DIR"))
(subpath (param "TMP_DIR")) (subpath (param "TMP_DIR"))
(subpath (string-append (param "HOME_DIR") "/.gemini"))
(subpath (string-append (param "HOME_DIR") "/.npm"))
(literal "/dev/stdout") (literal "/dev/stdout")
(literal "/dev/stderr") (literal "/dev/stderr")
(literal "/dev/null") (literal "/dev/null")

4
packages/cli/src/utils/sandbox.ts
View File

@ -145,9 +145,11 @@ export async function start_sandbox(sandbox: string) {
process.env.SEATBELT_PROFILE ??= 'minimal'; process.env.SEATBELT_PROFILE ??= 'minimal';
const args = [ const args = [
'-D', '-D',
`TARGET_DIR=${process.cwd()}`, `TARGET_DIR=${fs.realpathSync(process.cwd())}`,
'-D', '-D',
`TMP_DIR=${fs.realpathSync(os.tmpdir())}`, `TMP_DIR=${fs.realpathSync(os.tmpdir())}`,
'-D',
`HOME_DIR=${fs.realpathSync(os.homedir())}`,
'-f', '-f',
new URL( new URL(
`sandbox-macos-${process.env.SEATBELT_PROFILE}.sb`, `sandbox-macos-${process.env.SEATBELT_PROFILE}.sb`,