David Dworken 62e61c0e74 Sandbox hardening: TMPDIR write scope and seccomp arg comparison (#182) ...

* Harden macOS sandbox to only use the configured TMPDIR for writes

* Use 32-bit masked comparison for socket() domain argument in seccomp filter

2026-03-23 17:41:10 -07:00

..

build-seccomp-binaries.sh

Sandbox hardening: TMPDIR write scope and seccomp arg comparison (#182)

2026-03-23 17:41:10 -07:00