Skip to content

docs(dsh): confined mode works from CLI 0.1.196 #2939

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lilyshen0722 merged 1 commit into from
Oct 28, 2026
Merged

docs(dsh): confined mode works from CLI 0.1.196 #2939

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions docs/cli/dsh.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -90,8 +90,8 @@ run to its 900 s timeout. The profile denied the macOS resolver's configuration
service, and node's DNS resolver, which dsh builds as it loads, can block
forever on that denial. The profile now admits that one service, which returns
configuration only and opens no network route of its own, so resolution fails
fast. Use a
CLI release that carries this fix before running a seat confined.
fast. Confined mode works from CLI 0.1.196. A live confined turn on 2026-10-28
replied in about 35 s, and requests to hosts outside the allowlist were refused.

A seat that declares exactly this, and nothing else under `sandbox`, runs
confined:
Expand Down
Loading