Using Shiin with sandboxes
Note
Guide: draft. The source build implements the current behavior below; remaining design work is marked explicitly.
Shiin decides whether an action should happen. A sandbox limits the damage if an allowed action, or the code it runs, misbehaves.
Layering
Shiin and a sandbox answer different questions. Shiin decides before an action whether it should happen at all. A sandbox limits what can happen if an allowed action, or code it runs, misbehaves.
Why both
Shiin cannot see what a program does after it is allowed to run. A sandbox covers that gap. Conversely, a sandbox cannot decide that an action should not happen at all.
Recommended setup
- Enable Shiin’s adapter for your host.
- Enable the host’s sandbox for Bash commands.
- Keep host permission rules enabled alongside Shiin.