diff --git a/README.md b/README.md index 99a224a3..8d329ffc 100644 --- a/README.md +++ b/README.md @@ -105,8 +105,8 @@ cargo install --path crates/sandlock-cli # Basic confinement sandlock run -r /usr -r /lib -w /tmp -- ls /tmp -# Interactive shell -sandlock run -i -r /usr -r /lib -r /lib64 -r /bin -r /etc -w /tmp -- /bin/sh +# Interactive shell (the sandboxed command inherits the terminal) +sandlock run -r /usr -r /lib -r /lib64 -r /bin -r /etc -w /tmp -- /bin/sh # Resource limits + timeout sandlock run -m 512M -P 20 -t 30 -- ./compute.sh diff --git a/crates/sandlock-cli/src/main.rs b/crates/sandlock-cli/src/main.rs index f5fc5a30..5ff2e833 100644 --- a/crates/sandlock-cli/src/main.rs +++ b/crates/sandlock-cli/src/main.rs @@ -140,9 +140,6 @@ struct RunArgs { #[arg(short = 'e', long = "exec-shell", value_name = "CMD")] exec_shell: Option, - #[arg(short = 'i', long)] - interactive: bool, - /// Use a local Docker image as chroot rootfs, given by reference /// (e.g. `python:3.12-slim`, a digest, or an image id). The image /// must already be present in local Docker storage; sandlock never