Made sandbox read-write

kashifulhaque · kashifulhaque · commit afafcfafa6b4 · 2026-01-12T23:18:56.000+05:30
diff --git a/compose.yml b/compose.yml
@@ -153,8 +153,9 @@ services:
       - "no-new-privileges:true"    # prevents privilege escalation
     cap_drop:             # drop ALL Linux capabilities
       - ALL
-    tmpfs:                # only writable dir
+    tmpfs:                # only writable dirs
       - /tmp:rw,noexec,nosuid,size=64m
+      - /home/sandboxuser/.cache:rw,noexec,nosuid,size=32m
 
 volumes:
   postgres_data:
