From ced873d98d4352b5693dcda0c64b5f8551e60d98 Mon Sep 17 00:00:00 2001 From: Abhisek Datta Date: Thu, 8 Jan 2026 20:43:09 +0530 Subject: [PATCH] fix: Handle the case when package manager policy is explicitly disabled --- sandbox/executor/apply.go | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/sandbox/executor/apply.go b/sandbox/executor/apply.go index ddcbff6..ca147b3 100644 --- a/sandbox/executor/apply.go +++ b/sandbox/executor/apply.go @@ -41,8 +41,14 @@ func ApplySandbox(ctx context.Context, cmd *exec.Cmd, pmName string) (*sandbox.E log.Debugf("Looking up sandbox policy for %s", pmName) policyRef, exists := cfg.Config.Sandbox.Policies[pmName] - if !exists || !policyRef.Enabled { - return nil, fmt.Errorf("no sandbox policy enabled for %s", pmName) + if !exists { + return nil, fmt.Errorf("no sandbox policy configured for %s", pmName) + } + + // The policy is explicitly disabled for this package manager, so we skip sandbox + if !policyRef.Enabled { + log.Warnf("sandbox policy %s is explicitly disabled for %s, skipping sandbox", policyRef.Profile, pmName) + return sandbox.NewExecutionResult(), nil } log.Debugf("Loading sandbox policy %s", policyRef.Profile)