iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Configure filesystem and network access as separate, least-privilege controls. Start with read-only files and outbound networking disabled; grant write access only to the working project and required build locations, deny secrets and unrelated personal data, and enable internet access only for named hosts through an enforced proxy or domain filter. A network permission alone may not enforce a host allowlist.
The steps below cover Codex, VS Code agent sandboxing, Claude Code, and a Docker Sandbox fallback. Exact configuration options vary by product and host platform, so inspect the effective policy before allowing an agent to work on an untrusted repository.
Why do a sandbox’s file and network rules need to be configured together?
A coding agent can cause harm through either boundary: it might read or alter files it does not need, or send information out over a network connection. Limiting one does not automatically limit the other. Anthropic describes effective sandboxing as requiring both filesystem and network isolation.
Recommended Free Tools
For a typical coding task, the useful starting point is narrow: let the agent read the project, deny unrelated sensitive locations, leave outbound network access off, and add only the permissions the task requires. If the agent must change code, grant write access to the workspace rather than to a broad parent directory. If it must fetch a dependency or call a service, allow only the required destination and verify that the product’s enforcement mechanism is active.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
These controls reduce the impact of mistakes or prompt injection; they do not make a host computer, its credentials, or every tool launched from it inherently safe. VS Code’s documentation specifically cautions that sandboxing is not a virtual machine or user-account boundary and does not replace endpoint security.
What should I decide before changing sandbox settings?
Map the task’s actual inputs, outputs, and dependencies before granting access. This makes it easier to choose narrow paths and destinations instead of solving permission errors by opening the whole home directory or internet connection.
- Workspace: Identify the project directory the agent must inspect and, if needed, edit.
- Build outputs: Determine whether the task writes generated files outside the workspace. Grant only the specific output locations that are necessary.
- Shared caches: Decide whether package or dependency caches are needed. If so, prefer read-only access unless the task has a demonstrated need to modify them.
- Sensitive paths: Identify credentials and unrelated personal or work data that should not be readable or writable. Add explicit denies where the product supports them.
- External services: List the precise hosts needed for package downloads, APIs, or an internal service. Do not treat “needs the internet” as a sufficient destination policy.
- Local network: Decide whether the task needs a named service on a private network. Ordinary internet access and access to local-network hosts are separate controls in VS Code.
- Credentials: Determine whether the task can run without credentials. If it cannot, use a dedicated credential with only the permissions the task requires.
Write these decisions down before running an untrusted repository. A specific request such as “read this project, edit its source, and call this API host” can be translated into a policy; “give the agent enough access to finish” cannot.
How should I grant filesystem access?
Begin with the smallest useful read scope, then add write access only for the locations the agent must change. Keep secrets and unrelated home-directory data outside the agent’s readable scope whenever possible.
Start read-only, then add workspace writes
Read-only access is a sensible initial setting for investigation, explanation, and code review. For a change task, allow edits in the active workspace. Avoid granting write access to a broad home directory or to unrelated projects just because the agent needs to modify one repository.
Some products also support separate read-write, read-only, and denied path rules. These distinctions are useful: a dependency cache may need to be readable but not changed, while the project itself needs write access. If a build system writes to another directory, add that location narrowly rather than broadening the entire policy.
Use explicit denies for sensitive data
Make credentials and unrelated data an explicit part of the policy review. A project directory may contain a local configuration file or credential by mistake; do not assume that every file under the workspace is safe merely because the workspace is the agent’s intended target. Review what is actually in scope and use denied paths where available.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
In VS Code, denied paths take precedence over read-only paths, and read-only paths take precedence over read-write paths. That precedence allows a denied location to remain blocked even if a broader grant would otherwise include it. The current working directory is automatically granted read-write access, so check which directory is active before starting the agent.
Keep shared caches read-only unless there is a reason not to
A task may need to read a shared source or dependency cache to build or inspect a project. If so, grant read-only access where supported. Do not assume that a cache must be writable simply because the build process reads it; determine whether the task really needs to populate or alter it.
How should I configure network access?
Leave outbound access off when the task does not need it. When it does, allow only the necessary destinations through the product’s enforced proxy or domain filter; enabling a general network permission is not the same as enforcing an allowlist.
Separate permission from destination enforcement
Codex permission profiles combine filesystem and network rules. In Codex, network.enabled = true grants command network access, but domain rules are enforced only when the network-proxy feature is active. The documented pattern is to select a permission profile, enable the proxy, and allow only the required domains, such as a specific API endpoint.
Free tools Windows power users keep installed
One-click scans. No signup required.
This distinction is important: if network permission is on but the proxy is not active, direct outbound access may remain unrestricted. Do not rely on a list of allowed domains until you have verified that the proxy or other enforcement feature is actually in use.
Treat local-network access as a separate decision
VS Code separates outbound internet access from local-network access. Its allowNetwork setting controls outbound access, while allowLocalNetwork controls access to local-network hosts. Leave local-network access disabled unless the task requires a particular internal service, and narrow the permitted destinations where the configuration supports it.
For example, a task that calls a public API does not automatically need access to devices or services on a private network. Conversely, a development task that must contact a named internal service needs that access considered explicitly; a broad outbound-network setting does not answer whether local hosts are allowed.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Do not confuse a successful request with a narrow policy
A network request succeeding tells you that connectivity exists, not that it is limited to the intended hosts. Review the effective policy and the enforcement mechanism, then verify that the configuration is scoped as intended before an agent handles private code or credentials.
How do the supported approaches differ?
The controls and boundaries differ by product. Use the product-specific behavior below rather than assuming that a setting in one environment has an equivalent effect in another.
| Approach | Filesystem behavior documented here | Network behavior documented here | Boundary or operational note |
|---|---|---|---|
| Codex | Workspace-write mode allows edits in the workspace; approvals govern attempts to cross the boundary. | network.enabled = true grants command network access. Domain rules require the network-proxy feature to be active. |
Linux implementations use OS-level mechanisms including bubblewrap and seccomp. |
| VS Code agent sandboxing | Supports readwritePaths, readonlyPaths, and deniedPaths. Denies take precedence; the current working directory is automatically read-write. |
allowNetwork controls outbound access; allowLocalNetwork controls local-network hosts. Allowed and denied domain lists can narrow destinations. |
Use /sandbox policy to inspect the effective policy where supported. Sandboxing is not a VM or separate user-account boundary. |
| Claude Code | Anthropic describes filesystem isolation as one of two required boundaries. | Anthropic describes network isolation as the other required boundary. | Keep credentials out of paths the agent does not need. |
| Docker Sandbox | The project directory is the workspace exception in the documented sbx run approach. |
The sandbox has a selectable network policy. | Can provide an outer boundary when the host OS cannot provide the required sandbox primitives; credentials and elevated agent modes still require care. |
This is a comparison of documented configuration behavior, not a claim that the products have identical defaults or provide equivalent isolation. The available product documentation described here does not establish a shared default network state across all four approaches.
How do I configure Codex access?
Choose a permission profile that matches the task, keep workspace access scoped, and activate the proxy before relying on domain rules. In Linux implementations, OS-level mechanisms including bubblewrap and seccomp provide part of the sandbox boundary.
- Select a permission profile. Start with read-only permissions for inspection work. Use a workspace-write mode when the agent needs to edit project files.
- Keep writes inside the workspace. Workspace-write permits edits in the workspace, while approvals govern attempts to cross the boundary. Treat an approval request as a signal to assess whether the extra access is actually necessary.
- Leave network access disabled unless needed. If the task requires network access, enable it only as part of a deliberate network policy.
- Activate the network proxy before depending on domain rules. With the proxy feature active, allow only the exact required domains, such as the API endpoint the task must call.
- Check that the profile and network controls match the task. A network-enabled permission without an active proxy may allow unrestricted direct outbound traffic, so do not infer filtering from a configured domain list alone.
How do I configure VS Code agent sandboxing?
Use path grants and denies for the filesystem, and configure outbound and local-network access separately. Review the automatically writable current working directory and inspect the effective policy with /sandbox policy where supported.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Confirm the working directory. VS Code automatically grants the current working directory read-write access. Make sure it is the intended project, not a broader directory containing unrelated files.
- Set path scopes. Use
readwritePathsfor required edit locations,readonlyPathsfor locations the agent only needs to inspect, anddeniedPathsfor paths that must remain inaccessible. - Account for rule precedence. Denied paths take precedence over read-only paths, which take precedence over read-write paths. Check for a broad grant that overlaps a sensitive path and ensure the deny remains effective.
- Set outbound network access deliberately. Use
allowNetworkonly if the task needs outbound access, and narrow destinations with the allowed and denied domain lists. - Review local-network access independently. Use
allowLocalNetworkonly when the task needs to reach local-network hosts. - Inspect the effective policy. Run
/sandbox policywhere supported and verify that the resulting scope reflects the intended directory and network boundaries.
VS Code describes its sandbox as an OS-level restriction, not a virtual machine or separate user account. Do not use it as a reason to expose host credentials or ignore endpoint protections.
How should I use Claude Code or a Docker Sandbox?
For Claude Code, configure filesystem and network isolation together. If the host cannot supply the needed sandbox primitives, Docker Sandbox can serve as an outer boundary, but it does not make broadly exposed credentials safe.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Claude Code: keep both boundaries in view
Anthropic’s guidance identifies filesystem isolation and network isolation as required boundaries. Apply both to the task: restrict which files the agent can read or modify, and restrict where it can connect. Keep credentials out of paths the agent does not need, rather than treating network restrictions as a substitute for protecting local secrets.
Docker Sandbox: use the project as the workspace exception
Docker documents running agents such as Claude Code with sbx run. In that approach, the project directory is the workspace exception, and the sandbox has a selectable network policy. Docker’s Claude Code guide also documents project-level configuration and stored secrets.
A container can act as an outer boundary when the host operating system cannot provide the required sandbox primitives. That is a fallback, not permission to pass broad credentials into the container. Treat credentials and any elevated agent mode as trusted-container operations, and reassess what the process can access before starting it.
What should I do in a self-hosted OpenAI Agents API environment?
Limit outbound connections to the documented control-plane hosts, and give the runtime a dedicated environment key rather than the application’s broader API key.
- Allow only the documented control-plane hosts:
api.openai.comandcodex-cloud-environments.chatgpt.com. - Create a dedicated environment key with only environment and session permissions.
- Pass that key to the runtime as the environment credential.
- Keep the application’s broader API key outside the sandbox.
This guidance applies to self-hosted Agents API environments. It should not be generalized into a network allowlist for unrelated agent setups or services.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How can I check a policy and troubleshoot permission problems?
Inspect the effective policy before running an untrusted repository, then diagnose a blocked operation by identifying the specific path or destination it needs. Expand one boundary at a time and only as far as the task requires.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Use a short pre-run review
- Confirm the intended project is the workspace and that the active working directory is not broader than necessary.
- Check that write access is limited to the workspace and explicitly required build locations.
- Review read-only grants for shared sources or caches and remove any that the task does not need.
- Check that credential and unrelated home-directory paths are denied or outside the readable scope.
- Verify that outbound access is off when unnecessary, or that an active proxy or domain filter enforces the intended destinations.
- Check local-network access separately from ordinary outbound access.
- Use the product’s effective-policy inspection where available; in VS Code, this is
/sandbox policy.
If a file operation is blocked
Identify the exact file or directory involved and whether the agent needs to read it, write it, or both. Add the narrowest matching permission: read-only for inspection, read-write for a required output, or a specific build directory if generated files must be written there. If the path contains credentials or unrelated data, do not grant access simply to clear the error; find a safer input or output path instead.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
If a network request is blocked
Determine the precise host the task is trying to reach and whether the request is for a public service or a local-network host. Add only the needed host to the allowlist, and confirm that the proxy or domain filter is active. In Codex, a domain rule does not enforce restrictions unless the network-proxy feature is enabled. In VS Code, assess allowNetwork and allowLocalNetwork separately.
If host sandbox prerequisites fail
Use a container or Dev Container as an outer boundary if the host cannot provide the required sandbox primitives, then reassess the workspace exception, network policy, and credentials available inside it. Do not respond to a failed host sandbox by running the agent with broader credentials and assuming the container alone solves the exposure.
What credentials and approvals should an agent receive?
Prefer no credentials for tasks that can be completed without them. When access to a service is essential, provide a dedicated, narrowly scoped credential and keep broader application credentials outside the sandbox.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsApprovals are useful for operations outside a configured boundary, but they should complement the policy rather than replace it. In Codex workspace-write mode, approvals govern attempts to cross the workspace boundary. Keep approval prompts enabled for such operations so a request for more access remains visible and can be judged against the task.
For a self-hosted OpenAI Agents API environment, the documented pattern is a dedicated environment key limited to environment and session permissions, supplied as the environment credential. The broader application API key remains outside the sandbox. Rotate credentials after the task when appropriate, especially if their exposure or use is uncertain.
Frequently Asked Questions
Can a sandboxed agent use a package manager safely?
Only if the task needs it and the network policy permits the package sources it must reach. Decide whether the agent also needs to write to a package cache; reading a shared cache and modifying it are different permissions.
Does workspace-write access mean the agent can change every file on my computer?
In Codex, workspace-write describes edits in the workspace, while approvals govern attempts to cross that boundary. In VS Code, the current working directory is automatically read-write, so check which directory is active before starting.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Should I give an agent my normal API key?
Avoid exposing a broad application key when a narrower credential will work. The documented self-hosted Agents API pattern uses a dedicated environment key with only environment and session permissions and keeps the broader application key outside the sandbox.
Can domain allowlists work if the agent has network access enabled?
They can, but only when the enforcement mechanism is active. In Codex, domain rules require the network-proxy feature; without it, direct outbound access may be unrestricted.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
