fixup! add note about subprofile path

edx · Feb 13, 2025 · 9d81e2a · 9d81e2a
1 parent 0f29e5c
commit 9d81e2a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/codejail.profile b/codejail.profile
@@ -55,6 +55,8 @@ profile codejail_service flags=(mediate_deleted) {
     # The core of the confinement: When the sandbox Python is executed, switch to
     # the (extremely constrained) child profile.
     #
+    # This path needs to be coordinated with the Dockerfile and Django settings.
+    #
     # Manpage: "Cx: transition to subprofile on execute -- scrub the environment"
     /sandbox/venv/bin/python Cx -> child,