Gemini CLI fix: Isolate Docker runtime in macOS Seatbelt sandbox
josebalius · ghdev · 2026-08-21
- Vulnerability: Previously, the sandbox allowed communication with container daemons on macOS, potentially mounting the host filesystem via VirtioFS to escape the Seatbelt boundary.
- Fix: Explicitly denies access within macOS Seatbelt profiles to:
- Unix Domain Sockets: e.g., /var/run/docker.sock and user runtime paths.
- Container CLI/Daemon Binaries: e.g., docker, podman, colima.
- Mach/XPC Service Lookups and POSIX shared memory.
- Verification: Includes unit tests verifying profile generation and invariants.
More from coding & agent
- Agentic coding accessibility will reshape understanding of software complexity — pixlpa · 2026-08-24
- Devin Agent bypasses Slack block by finding emails in git logs — sandylikesfrogs · 2026-08-24
- Developer habits shift: Agents become collaborators from simple tools — latticecut · 2026-08-24
- Dev bottleneck shifts from writing to reading code: exe.dev co-founder — thursdai_pod · 2026-08-24
- The biggest AI mistake: trying to reinvent the wheel instead of using tools — Tired40s · 2026-08-24
- DeepPaperNote turns research papers into Obsidian notes — tom_doerr · 2026-08-24