Automatic drop based on the shell's current working directory

[Changaco]

Have you considered implementing the same type of shell integration that island provides? It would almost eliminate the risk of forgetting to drop run before launching potentially dangerous commands.

[wrr]

Thanks, interesting approach. This is something that could be added in shell config files, without making it a core part of Drop, but as a mechanism above it. If certain directories are entered, shell would automatically activate a specific Drop environment.

There are two things to consider:

• Drop environments have own home dirs. Tools installed to home dir from within Drop are not on the host's PATH, so they won't be accidentally invoked outside the sandbox.
• drop init by default exposes the current working directory to Drop. This is to allow to run some commands outside of sandbox (like git push, git pull). If entering the directory always activates Drop, running such unsandboxed commands would no longer be possible. But then, the directory could just be created and available in the Drop environment only.

[Changaco]

Shell integration can indeed be implemented separately on top of the existing commands, but in my opinion it should be the normal way of using a per-directory sandboxing tool like drop, so it should be built-in.

Regarding your two bullet points:

1. Programs installed within the sandbox aren't the only dangerous ones that need to be contained.
2. The idea isn't to launch a sandboxed subshell as soon as a relevant directory is entered. That isn't what island does. What it does is prefix every command with island run, unless the command is already prefixed with nosandbox.