Skip to content

Conversation

@dileepyavan
Copy link

@dileepyavan dileepyavan commented Nov 25, 2025

Enable --inline-settings option to pass the json string. If these settings are dynamic enough to change frequently in a session, it would be optimal to read it from an inline string than a physical file.

This improves security as multiple processes reading files while updates are being made will cause race conditions which impacts overall sandboxing functionality.

@dileepyavan
Copy link
Author

Looking for your feedback on this PR. We would like to maintain the settings in memory.

@hwittenborn
Copy link

What's the benefit vs just writing to a temp file? Curious for my own use cases as well.

I would love the ability to modify the sandbox permissions while running, though I haven't thought a ton about that implementation quite yet.

@dileepyavan
Copy link
Author

For our scenario, we already have these stored as settings in another file and need to build the config based on these settings. Instead of creating another config, reading and storing in-memory is easy to maintain and easy to provide isolation per process without the overhead of file maintenance operations.

@dileepyavan
Copy link
Author

This improves security as multiple processes reading files while updates are being made will cause race conditions which can impact overall sandboxing functionality.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants