server/sandbox/seccomp/clamd/workload.toml
# Heimdall is a defensive sandbox. clamd, Holger's malware engine, in its sandbox
# container (scripts/clamd-sandbox.sh, server/lib/src/sandbox/clamd.rs). Its evidence is
# LIVE (heimdall profile probe-exec around the real daemon, driven over Holger's own
# protocol), not a corpus of command lines: scripts/clamd-profile.sh measures it, and
# README.md lists the runs. `heimdall profile gen clamd --profiles server/sandbox/seccomp
# --libc musl` writes the profile from x86_64-musl.probe.json. Never edited by hand.
workload = "clamd"
exact_limit = 16
allow_wx = false