14 lines
593 B
Markdown
14 lines
593 B
Markdown
---
|
|
status: accepted
|
|
---
|
|
|
|
# Sandbox the Ghidra worker
|
|
|
|
Ghidra parses adversarial Samples through a large Java analysis engine, while
|
|
the Rust harness must manage trusted locks, store data, and atomic promotion.
|
|
The harness therefore remains outside a narrow sandbox containing only the
|
|
Ghidra/JVM worker and its invocation capabilities. Bubblewrap is the default
|
|
Linux backend, with explicit external-harness and disabled modes for
|
|
environments that cannot nest it. This limits a compromised worker's access
|
|
without turning the CLI into a daemon or allowing arbitrary sandbox-runner
|
|
commands.
|