restricted networking for all sandboxing methods, new seatbelt profiles, updated docs, fixes to sandbox build, debugging through sandbox (#891)

1 files changed, 5 insertions, 4 deletions

diff --git a/scripts/start.js b/scripts/start.js
index f9f85c8e..d38e00f6 100644
--- a/scripts/start.js
+++ b/scripts/start.js
@@ -33,11 +33,12 @@ execSync('node ./scripts/check-build-status.js', {
 // inside sandbox SANDBOX should be set and sandbox_command.js should fail
 const nodeArgs = [];
 try {
-  execSync('node scripts/sandbox_command.js -q', {
-    stdio: 'inherit',
+  const sandboxCommand = execSync('node scripts/sandbox_command.js', {
     cwd: root,
-  });
-  if (process.env.DEBUG) {
+  })
+    .toString()
+    .trim();
+  if (process.env.DEBUG && !sandboxCommand) {
     if (process.env.SANDBOX) {
       const port = process.env.DEBUG_PORT || '9229';
       nodeArgs.push(`--inspect-brk=0.0.0.0:${port}`);