CroneKorkN
6db792ce6a
Copied verbatim from left4me/deploy/files/. Helpers are the trust unit the sudoers rules grant access to; left as static files (not generated) so the audit trail stays grep-able. Modes/owners are set via items.py in the next commit.
6 lines
330 B
Text
6 lines
330 B
Text
# Sandbox-only resolver config — bind-mounted into script-overlay sandboxes
|
|
# at /etc/resolv.conf. The host's resolver (often a private/LAN DNS server)
|
|
# is unreachable from inside the sandbox because IPAddressDeny= blocks
|
|
# egress to RFC1918 / loopback. Public resolvers keep DNS working.
|
|
nameserver 1.1.1.1
|
|
nameserver 8.8.8.8
|