mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-19 05:50:41 +08:00
Piotr Mlocek
aca0575a50
BREAKING CHANGE: Policy YAML and public policy APIs now use the protobuf-shaped openshell.policy.v1.PolicyDocument contract. Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com>
51 lines
1.2 KiB
YAML
51 lines
1.2 KiB
YAML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
version: 1
|
|
|
|
filesystem_policy:
|
|
include_workdir: true
|
|
read_only:
|
|
- /usr
|
|
- /lib
|
|
- /proc
|
|
- /dev/urandom
|
|
- /app
|
|
- /etc
|
|
- /var/log
|
|
read_write:
|
|
- /sandbox
|
|
- /tmp
|
|
- /dev/null
|
|
|
|
landlock:
|
|
compatibility: best_effort
|
|
|
|
process:
|
|
run_as_user: sandbox
|
|
run_as_group: sandbox
|
|
|
|
# Intent: read-only GitHub access for the agent.
|
|
# The REST API has L7 enforcement — only GET allowed.
|
|
# github.com is included for git clone — "it just needs connectivity."
|
|
network_policies:
|
|
github_api:
|
|
name: github-api
|
|
endpoints:
|
|
# REST API — L7 enforced, read-only
|
|
- host: api.github.com
|
|
ports: [443]
|
|
protocol: rest
|
|
enforcement: enforce
|
|
access: read-only
|
|
# github.com — for git clone.
|
|
# No protocol field — L4 only.
|
|
- host: github.com
|
|
ports: [443]
|
|
binaries:
|
|
- { path: /usr/local/bin/claude }
|
|
- { path: /usr/bin/git }
|
|
- { path: /usr/bin/curl }
|
|
- { path: /usr/bin/gh }
|
|
- { path: /sandbox/.uv/python/**/python3* }
|