Cameron Mcloughlinandzed-zippy[bot]
8aa5c03670
Closes security loopholes and updates docs: - installs seccomp filter for blocking naughty syscalls - tightens macos seatbelt profile - fetch tool responses that redirect are now constrained by allowed domains list Also adds a few "Learn More" buttons that link to the new docs. Also fixes a bug where the agent would try to create a `~/.config/zed/AGENTS.md` directory Also adds unicode confusable detection to URL/path privilege escalation prompts. --- Release Notes: - N/A or Added/Fixed/Improved ... --------- Co-authored-by: zed-zippy[bot] <234243425+zed-zippy[bot]@users.noreply.github.com>
74 lines
2.6 KiB
TOML
74 lines
2.6 KiB
TOML
[package]
|
|
name = "sandbox"
|
|
version = "0.1.0"
|
|
edition.workspace = true
|
|
publish.workspace = true
|
|
license = "GPL-3.0-or-later"
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[lib]
|
|
path = "src/sandbox.rs"
|
|
|
|
[features]
|
|
# Builds `bwrap_test_helper`, the behavior helper driven by the NixOS sandbox
|
|
# VM tests in `nix/tests/sandboxing`. Off by default so normal builds don't
|
|
# produce the test binary. Pulls in serde only when enabled (the helper parses
|
|
# its check list as JSON), and enables the matching `http_proxy` escape hatch so
|
|
# the in-process proxy can reach the VM's private-network echo servers.
|
|
nixos-test = [
|
|
"dep:serde",
|
|
"dep:serde_json",
|
|
"http_proxy/nixos-integration-tests",
|
|
]
|
|
|
|
# Builds `wsl_sandbox_test_helper`, the Windows analog of `bwrap_test_helper`.
|
|
# It drives the real WSL/Bubblewrap sandbox end-to-end (see
|
|
# `script/test-wsl-sandbox.ps1` / `cargo xtask wsl-sandbox-tests`). Off by
|
|
# default so normal builds and the workspace test run don't produce it.
|
|
wsl-test = []
|
|
|
|
# Behavior test helper for the Linux Bubblewrap sandbox. Only built when the
|
|
# `nixos-test` feature is enabled (and only meaningful on Linux).
|
|
[[bin]]
|
|
name = "bwrap_test_helper"
|
|
path = "src/bwrap_test_helper.rs"
|
|
required-features = ["nixos-test"]
|
|
|
|
# Behavior test helper for the Windows WSL/Bubblewrap sandbox. Only built when
|
|
# the `wsl-test` feature is enabled (and only meaningful on Windows).
|
|
[[bin]]
|
|
name = "wsl_sandbox_test_helper"
|
|
path = "src/wsl_sandbox_test_helper.rs"
|
|
required-features = ["wsl-test"]
|
|
|
|
[dependencies]
|
|
anyhow.workspace = true
|
|
futures.workspace = true
|
|
http_proxy.workspace = true
|
|
log.workspace = true
|
|
# Used only by the `nixos-test` helper binary to parse its check list; gated
|
|
# behind the `nixos-test` feature so normal builds don't pull it in.
|
|
serde = { workspace = true, optional = true }
|
|
serde_json = { workspace = true, optional = true }
|
|
|
|
[target.'cfg(target_os = "linux")'.dependencies]
|
|
libc.workspace = true
|
|
# Safe wrappers for the SCM_RIGHTS fd-passing and `fstat` the bind validator
|
|
# needs, so that code doesn't hand-roll `msghdr`/`CMSG_*`/`mem::zeroed` unsafe.
|
|
nix = { workspace = true, features = ["fs", "socket", "uio"] }
|
|
# Builds the in-sandbox seccomp-BPF filter that blocks the untrusted command from
|
|
# creating `AF_UNIX` (and other non-IP) sockets, `io_uring`, `ptrace`, etc. — the
|
|
# syscall-level half of preventing session-IPC-socket sandbox escapes.
|
|
seccompiler.workspace = true
|
|
|
|
[target.'cfg(target_os = "linux")'.dev-dependencies]
|
|
tempfile.workspace = true
|
|
|
|
[target.'cfg(target_os = "macos")'.dependencies]
|
|
tempfile.workspace = true
|
|
|
|
[target.'cfg(target_os = "windows")'.dependencies]
|
|
smol.workspace = true
|