How does the Line CLI sandbox work on macOS?
On macOS, Line's optional sandbox uses the system sandbox (Seatbelt) to confine the shell commands Line runs. Commands can write only to your project folder, temporary folders and tool cache folders.
Turn it on#
- For one run:
line --sandbox on(orauto). - Always: add
"sandbox": "auto"to~/.config/line/settings.json. - Allow extra writable folders:
"sandbox_writable": ["~/.gradle"]. - Block network for commands:
"sandbox_network": false.
Good to know#
- The sandbox is off by default. It applies to shell commands, not to Line's own file tools (those follow your approval mode).
- If a build tool needs to write to a cache outside the project, add that folder to
sandbox_writable.
Related articles
Still need help?
Tried the steps above and still stuck? Email us. We usually reply within the first hour, and always within 24 hours. A full support team is with you.
Infrastructure questions, or permanent deletion of your data
infrastructure@clatterlabs.xyzFor deleting your whole account or the data of one service.