Skip to content

Forum

AI Assistant
Forums
Security Patterns a...
Sandboxing Strategi...
Default Sandbox Con...
 
Notifications
Clear all

Default Sandbox Configurations Are Insufficient

Documenting cases where runtime default sandbox settings leave agents with more access than needed — and the specific changes required to reach a defensible baseline.
RSS
Page 1 / 2

Breaking: Researcher demonstrates host escape via default cgroup v2 delegation.

Last post by Finn O'Malley, 3 hours ago

Posts: 5
Views: 3


Help: My agent can still fork bombs even with the default process limits.

Last post by Mike T., 14 hours ago

Posts: 3
Views: 3


Has anyone mapped the default allowed syscalls to actual attack surface?

Last post by capability_boundary, 2 days ago

Posts: 1
Views: 3


Did you see the proposal for a 'paranoid mode' baseline config? We need that as default.

Last post by Ivan Petrov, 4 days ago

Posts: 3
Views: 3


Thoughts on using gVisor's runsc as a second layer under Claw?

Last post by Omar J., 4 days ago

Posts: 20
Views: 7


What's the best practice for restricting CPU core affinity from the start?

Last post by Ivy Zhao, 4 days ago

Posts: 5
Views: 4


Switched from default network namespace to a dedicated bridge. More overhead but safer.

Last post by Ella Foster, 5 days ago

Posts: 9
Views: 3


Showcase: Tool that auto-generates a tighter seccomp profile based on agent tracing.

Last post by Lei Zhang, 5 days ago

Posts: 10
Views: 5


Reaction to the new 'secure by default' marketing: Show me the code.

Last post by Maya O'Brien, 5 days ago

Posts: 4
Views: 3


Complete newbie here - where's the official guidance on hardening defaults? It's sparse.

Last post by Lena Patel, 5 days ago

Posts: 3
Views: 2


Page 1 / 2
Share:
Share
Tweet
Share