sandbox.conf(5)

💖 sandbox.conf — the manual page, but make it a group chat 💖

okay bestie, so this is sandbox.conf(5), a Linux System Administration situation, and it's genuinely the cutest lil config file you'll ever meet. no cap. let's get into it.

✨ NAME ✨

sandbox.conf — the user config file for the SELinux sandbox 🎀

🌸 DESCRIPTION 🌸

so here's the tea: when you run sandbox with the -C argument, it gets confined using control groups, and a system administrator can decide exactly how that sandbox is confined. that's where this file comes in. it's giving "let me customize my own little bubble" energy 🫧

few ground rules before we go off:

• everything after # is ignored. literally just vibes, the parser is not reading it 🙈
• empty lines are ignored too. breathe, bestie.
• all arguments should be separated by an equals sign (=). that's the separator. periodt.

these keywords are the only ones allowed:

• NAME — the name of the sandbox control group. default is "sandbox". (yes, it's sandbox named sandbox. iconic behavior honestly 💅)
• CPUAFFINITY — which cpus to assign the sandbox to. the default is ALL, but users can specify a comma-separated list with dashes (-) to represent ranges. ex: 0-2,5. so like, "i want cpus 0, 1, 2, and also 5, no i will not elaborate" 🔥
• MEMUSAGE — how much memory to allow the sandbox to use. default is 80%. users can specify either a percentage, or a value in the form of a number followed by one of the suffixes K, M, G to denote kilobytes, megabytes or gigabytes respectively. ex: 50% or 100M. pick your fighter ✨
• CPUUSAGE — percentage of cpu the sandbox should be allowed to use. default is 80%. specify a value followed by a percent sign (%). ex: 50%. she's on a budget and the budget is percentages 📉

🦋 SEE ALSO 🦋

• sandbox(8)

👑 AUTHOR 👑

this manual page was written by Thomas Liu <tliu@fedoraproject.org> 🫶 thank you for your service king

ngl, that's the whole page. go forth and confine responsibly 💜

and that's a wrap bestie!! this page is from sandbox.conf, dated June 2010, and it lives in section sandbox.conf(5) — so if you ever forget where you read all this, that's the vibe check receipt 💖✨🌸