Post #4150369
2026-07-20 21:43 UTC
@GuillaumeRossolini@infosec.exchange @wez@social.treehouse.systems I find it funny it has a “sandbox mode” at all. When it runs up against a limitation in the sandbox, it almost always drops out of the sandbox to do its work or it figures out a way to run the commands to subvert the sandbox. Especially if you’re in “auto” mode.
Replies (1)
-
@wez@social.treehouse.systems 2026-07-20 21:56
@ramsey@phpc.social @GuillaumeRossolini@infosec.exchange nod. You need to accept that if you give it a bash tool, it can run any command it wants regardless of what prompting you gave it, so you need to treat it as an untrusted adversary. Definitely don't mount the docker-socket-gateway-to-root in there! I think the only "sane" way to manage these things is to use kernel level stuff to block them, which is not usually very flexible.