Dangerzone Threat Model

Component: entrypoint.py

Generates restrictive OCI config, then launches gVisor as an inner container

boundary: Outer container loads resources: ['system'] assume not compromised executes commands is memory safe is reproducible is sandboxed is verifiable works offline

Threats Affecting This Component

No threats identified for this component.

Scenarios Using This Component

Back to Components List | Back to Summary