mirror of https://github.com/NVIDIA/OpenShell.git synced 2026-11-04 08:25:55 +08:00

Files

T

Drew Newberry eeba0e7954 refactor(runtime): confine and reduce unsafe code (#4130 )

* refactor(runtime): confine and reduce unsafe code

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

* fix(ci): make signal probe portable and gate Linux initialization

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

* fix(cli): handle platform-specific SSH cancellation lints

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

---------

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

2026-10-10 01:12:03 +00:00

src

refactor(runtime): confine and reduce unsafe code (#4130 )

2026-10-10 01:12:03 +00:00

tests

feat(isolation): implement the RFC 0012 sandbox architecture (#2942 )

2026-09-16 00:49:14 +00:00

Cargo.toml

refactor(runtime): confine and reduce unsafe code (#4130 )

2026-10-10 01:12:03 +00:00

README.md

refactor(runtime): confine and reduce unsafe code (#4130 )

2026-10-10 01:12:03 +00:00

README.md

Sandbox runtime

openshell-sandbox owns the Linux workload isolation mechanisms and their kernel qualification probes. The linux module contains seccomp notifications and child filters, task-memory access, process-signal mediation, procfs descriptor lookup, socket identity, Landlock qualification, and the workload launch thread.

sandbox::linux composes policy enforcement. The top-level linux module owns the lower-level mechanisms used by that orchestration and the boundary server. Unsafe kernel ABI, process-launch, and descriptor-ownership operations stay in this runtime crate behind safe APIs where their contracts can be enforced.