mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
Abhisek DattaandGitHub
3778d4d1f3
* feat: Add support for network bind * chore: Add comments for bwrap sandbox
28 lines
695 B
YAML
28 lines
695 B
YAML
name: npx
|
|
description: Profile for npx/pnpx generators with write access to current directory
|
|
inherits: npm-restrictive
|
|
|
|
package_managers:
|
|
- npx
|
|
- pnpx
|
|
|
|
# npx and pnpx require PTY access to work, especially for commands like:
|
|
# npx create-next-app@latest
|
|
#
|
|
# Explicitly setting this so that it is enabled even if we decide to turn this off
|
|
# in parent profiles in the future.
|
|
allow_pty: true
|
|
|
|
# npx generators and dev servers frequently need to bind to localhost ports
|
|
allow_network_bind: true
|
|
|
|
filesystem:
|
|
# Add write permissions for common generator outputs
|
|
allow_write:
|
|
- ${CWD}/**
|
|
|
|
# Additional deny rules for extra security
|
|
deny_write:
|
|
- ${CWD}/.env
|
|
- ${CWD}/.env.*
|