All sandboxes are created under this directory. To avoid symlink attacks, this directory and all its ancestors must be writeable only by root.
All sandboxes are created under this directory. To avoid symlink attacks, this directory and all its ancestors must be writeable only by root.