Michael Bolin cd5f9074af feat: add /tmp by default (#1919) ...

Replaces the `include_default_writable_roots` option on
`sandbox_workspace_write` (that defaulted to `true`, which was slightly
weird/annoying) with `exclude_tmpdir_env_var`, which defaults to
`false`.

Though perhaps more importantly `/tmp` is now enabled by default as part
of `sandbox_mode = "workspace-write"`, though `exclude_slash_tmp =
false` can be used to disable this.

cd5f9074af · 2025-08-07 00:17:00 -07:00

History

..

landlock.rs

feat: add /tmp by default (#1919)

2025-08-07 00:17:00 -07:00