From b59a940057f5753282415b0b6d1b5ea455221451 Mon Sep 17 00:00:00 2001 From: Olcan Date: Thu, 8 May 2025 11:28:45 -0700 Subject: adjust seatbelt to allow write into specific dirs under user home (#289) --- packages/cli/src/utils/sandbox-macos-minimal.sb | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) (limited to 'packages/cli/src/utils/sandbox-macos-minimal.sb') diff --git a/packages/cli/src/utils/sandbox-macos-minimal.sb b/packages/cli/src/utils/sandbox-macos-minimal.sb index c304b838..5a8b46dd 100644 --- a/packages/cli/src/utils/sandbox-macos-minimal.sb +++ b/packages/cli/src/utils/sandbox-macos-minimal.sb @@ -3,13 +3,14 @@ ;; allow everything by default (allow default) -;; deny all writes EXCEPT under project directory, temp directory, stdout/stderr and /dev/null +;; deny all writes EXCEPT under specific paths (deny file-write*) (allow file-write* (subpath (param "TARGET_DIR")) (subpath (param "TMP_DIR")) + (subpath (string-append (param "HOME_DIR") "/.gemini")) + (subpath (string-append (param "HOME_DIR") "/.npm")) (literal "/dev/stdout") (literal "/dev/stderr") (literal "/dev/null") -) - +) \ No newline at end of file -- cgit v1.2.3