trending/OpenShell
1
0
Fork 0
mirror of https://github.com/NVIDIA/OpenShell.git synced 2026-10-21 06:11:31 +08:00
Code Issues Packages Projects Releases Wiki Activity

docs: soften default-deny wording to minimal outbound access

Browse Source 
Sandbox defaults vary by type and community configs, so
"all outbound traffic is blocked" is too absolute.

Made-with: Cursor
This commit is contained in:
Alexander Watson
2026-03-13 10:59:33 -07:00
parent 1c6b386224
commit de7ff8b6fb
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+2 -2
View File
@@ -48,10 +48,10 @@ The sandbox container includes the following tools by default:
### See network policy in action
Every sandbox starts in **default-deny** — all outbound traffic is blocked. You open access with a short YAML policy that the proxy enforces at the HTTP method and path level, without restarting anything.
Every sandbox starts with **minimal outbound access**. You open additional access with a short YAML policy that the proxy enforces at the HTTP method and path level, without restarting anything.
```bash
# 1. Create a sandbox (all outbound traffic denied by default)
# 1. Create a sandbox (starts with minimal outbound access)
openshell sandbox create --name demo --keep --no-auto-providers
# 2. Inside the sandbox — blocked