dot_sandbox(1) General Commands Manual dot_sandbox(1)
NAME
dot_sandbox - Graphviz sandbox
SYNOPSIS
dot_sandbox options...
DESCRIPTION
This program is a wrapper around Graphviz. It aims to provide a safe
environment for the processing of untrusted input graphs and command
line options. More precisely:
o No network access will be allowed.
o The file system will be read-only. Command line options like
-o ... and -O will not work. It is expected that the caller
will render to stdout and pipe the output to their desired
file.
The command line options to dot_sandbox are command line options to be
passed to dot. Options are passed through unmodified.
The following sandboxing mechanisms are supported:
o Bubblewrap
SEE ALSO
dot(1), bwrap(1)
dot_sandbox(1)
graphviz 12.2.1 - Generated Sun Dec 15 15:14:09 CST 2024