KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #ai-agents #developer-tools #ai-agent #claude-code #mcp #typescript #codex #cli #rust #deepseek-harness

mori

★ 48 Open GitHub ↗

A security sandbox tool that controls network and file access

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

![GitHub Repo stars](https://img.shields.io/github/stars/skanehira/mori?style=social)
![GitHub](https://img.shields.io/github/license/skanehira/mori)
![GitHub all releases](https://img.shields.io/github/downloads/skanehira/mori/total)
![GitHub CI Status](https://img.shields.io/github/actions/workflow/status/skanehira/mori/ci.yaml?branch=main)
![GitHub Release Status](https://img.shields.io/github/v/release/skanehira/mori)

A security sandbox tool that controls network and file access for processes using eBPF on Linux and sandbox-exec on macOS.

![](https://i.gyazo.com/3586a7de351913b4287ba2e5b5bfcaac.png)

## Features

- **Cross-platform**: Works on both Linux (eBPF) and macOS (sandbox-exec)
- **Network Access Control**:
  - Linux: Full support for domain names, IP addresses, and CIDR ranges
  - macOS: All-or-nothing network control only (allow all or deny all network access)
- **File Access Control**: Restrict file system access to specific directories and files
- **Configuration File Support**: Define policies in TOML format for reusable configurations

## Installation

### From Source

For detailed development guide and troubleshooting, see [docs/development_guide.md](docs/development_guide.md).

**Prerequisites:**
- Rust 1.90 or later (specified in `rust-toolchain.toml`)
- On Linux: BPF tools and nightly toolchain with rust-src

**Linux Setup:**

- **Linux**: Root privileges required for eBPF and cgroup operations (CAP_BPF, CAP_SYS_ADMIN, CAP_NET_ADMIN)
- **cgroup v2**: Must be mounted at `/sys/fs/cgroup`
- **BPF LSM**: Kernel must have `CONFIG_BPF_LSM=y` and `bpf` in `/sys/kernel/security/lsm`

```bash
# Install BPF dependencies (Ubuntu/Debian)
sudo apt-get install -y libbpf-dev linux-tools-common linux-tools-$(uname -r)

# Install Rust nightly toolchain with BPF target
rustup toolchain install nightly-x86_64-unknown-linux-gnu --profile minimal --component rust-src

# Install bpf-linker
cargo install bpf-linker

# Build mori
cargo build --release
```

**macOS Setup:**
```bash
# Build (eBPF components are skipped on macOS)
cargo build --release
```

The compiled binary will be available at `./target/release/mori`.

### From Binary Releases

Download pre-built binaries from the [Releases](https://github.com/skanehira/mori/releases) page.

> **Note for Linux**: Pre-built Linux binaries are built against a specific kernel version and may not work on different kernel versions due to eBPF compatibility. The kernel version is included in the binary filename (e.g., `mori-x86_64-unknown-linux-gnu-kernel-6.8.0`). If the binary doesn't work on your system, please build from source.

## Usage

> **Note**: On Linux, `sudo` is required for eBPF and cgroup operations. On macOS, `sudo` is not required as sandbox-exec does not need elevated privileges.
>
> **Linux Tip**: To preserve environment variables and PATH when using `sudo`, use `sudo -E env "PATH=$PATH" mori ...`

### Basic Network Control

Allow network access only to specific domains (Linux only):

```bash
# Allow access to example.com
mori --allow-network example.com -- curl https://example.com

# Allow multiple domains
mori --allow-network example.com,github.com -- your-command

# Allow specific IP addresses
mori --allow-network 192.168.1.1 -- your-command

# Allow CIDR ranges
mori --allow-network 10.0.0.0/24 -- your-command

# Allow all network access (both Linux and macOS)
mori --allow-network-all -- your-command
```

### File Access Control

Deny access to specific files or directories:

```bash
# Deny all access (read/write) to a file
mori --deny-file /etc/passwd -- your-command

# Deny read access to specific files
mori --deny-file-read /etc/shadow,/root/.ssh -- your-command

# Deny write access to specific directories
mori --deny-file-write /var/log,/tmp -- your-command

# Combine multiple file restrictions
mori --deny-file /etc/passwd --deny-file-write /var -- your-command
```

### Real-World Example: Claude Code with Network Restrictions

Restrict Claude Code to only access Anthropic's API:

```bash
# Linux (preserving PATH for the claude command)
sudo -E env "PATH=$PATH" mori --allow-network api.anthropic.com -- claude
```

### Using Configuration Files

Create a TOML configuration file with all available options:

```toml
# mori.toml - Complete configuration example

[network]
# Network access control
# Option 1: Allow all network access
# allow = true

# Option 2: Deny all network access (default)
# allow = false

# Option 3: Allow specific destinations (Linux only)
# Supports domain names, IP addresses, and CIDR ranges
allow = [
  "example.com",          # Domain name
  "192.168.1.1",          # Single IP address
  "10.0.0.0/24",          # CIDR range
  "8.8.8.8"               # Google DNS
]

[file]
# Deny both read and write access to these paths
deny = [
  "/etc/passwd",
  "/tmp/secret"
]

# Deny read-only access to these paths
deny_read = [
  "/home/user/.ssh",
  "/etc/shadow"
]

# Deny write-only access to these paths
deny_write = [
  "/var/log",
  "/etc/systemd"
]
```

Run with the configuration:

```bash
sudo mori --config mori.toml -- your-command
```

**Note**: CLI arguments take precedence over configuration file settings.

## The Meaning Behind the Name "mori(杜)"
While "mori(杜)" literally means "a cluster of trees," in Japanese cultural context it most commonly refers to shrine forests—the sacred groves that surround shrine grounds. This has evolved to convey the idea of "forests as a sacred boundary or barrier."

*	Forests as sacred domains
  Shrine guardian forests are regarded as "natural boundaries" that separate the mundane world from the divine realm. The transition from the secular to the sacred is symbolized by crossing the torii gate into the forest.

*	Mori(杜) as symbolic barriers
  These aren't mere woodlands but "preserved spaces dedicated to divine worship." They represent sanctified areas isolated from the outside world.

We chose the name "mori(杜)" to evoke the image of a specially protected domain—a sandbox-like boundary shielded from the outside world.

mori

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README