ghidra-cli/docs/adr/0006-sandbox-the-ghidra-worker.md

status
accepted

Sandbox the Ghidra worker

Ghidra parses adversarial Samples through a large Java analysis engine, while the Rust harness must manage trusted locks, store data, and atomic promotion. The harness therefore remains outside a narrow sandbox containing only the Ghidra/JVM worker and its invocation capabilities. Bubblewrap is the default Linux backend, with explicit external-harness and disabled modes for environments that cannot nest it. This limits a compromised worker's access without turning the CLI into a daemon or allowing arbitrary sandbox-runner commands.