From 9d81e2a8057804c8eccb3c60a116d2a376d81673 Mon Sep 17 00:00:00 2001
From: Tim McCormack <tmccormack@edx.org>
Date: Thu, 13 Feb 2025 23:42:17 +0000
Subject: [PATCH] fixup! add note about subprofile path

---
 codejail.profile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/codejail.profile b/codejail.profile
index 1ff7837748..f29b0bcfbc 100644
--- a/codejail.profile
+++ b/codejail.profile
@@ -55,6 +55,8 @@ profile codejail_service flags=(mediate_deleted) {
     # The core of the confinement: When the sandbox Python is executed, switch to
     # the (extremely constrained) child profile.
     #
+    # This path needs to be coordinated with the Dockerfile and Django settings.
+    #
     # Manpage: "Cx: transition to subprofile on execute -- scrub the environment"
     /sandbox/venv/bin/python Cx -> child,