Reference

Reference: server.sandbox

`server.sandbox.mode`


Syntax	`mode: off \| audit \| on`
Default	`required`
Context	`server.sandbox`
Reload	applies on reload

off (default), audit or on. Applied only to a configuration that starts no processes (no managed runtimes, no tenant users) and on kernels with Landlock.

`server.sandbox.read_paths`


Syntax	`read_paths: [<string>, ...]`
Default	`none`
Context	`server.sandbox`
Reload	applies on reload

Extra directories scalwsd may read under scalws-controller (where reads are limited to what the configuration names); missing ones are skipped.

`server.sandbox.write_paths`


Syntax	`write_paths: [<string>, ...]`
Default	`none`
Context	`server.sandbox`
Reload	applies on reload

Extra directories scalwsd may write (created at start when missing).