AI 编程 Agent 安全配置教程：3 步给 Claude Code/Codex 加权限沙箱

# 1. 创建专用用户
sudo useradd -m -s /bin/bash aiagent

# 2. 设置项目目录权限
sudo mkdir -p /opt/ai-projects/my-project
sudo chown aiagent:aiagent /opt/ai-projects/my-project

# 3. 以受限用户运行 Agent
sudo -u aiagent claude

{
  "permissions": {
    "allow": ["/opt/ai-projects/**"],
    "deny": ["/etc/", "/home/", "/root/**"],
    "requireApproval": ["sudo", "rm -rf", "chmod 777"]
  }
}

FROM ubuntu:24.04
RUN apt-get update && apt-get install -y git curl build-essential
RUN useradd -m agent && usermod -aG sudo agent
USER agent
WORKDIR /workspace

docker build -t ai-agent-sandbox .

docker run -it --rm \
  --read-only \
  --tmpfs /tmp:rw,noexec,nosuid,size=2G \
  --tmpfs /workspace:rw,noexec,nosuid,size=5G \
  -v "$(pwd):/workspace/project:ro" \
  --cap-drop=ALL \
  --cap-add=DAC_OVERRIDE \
  --memory=4g \
  --cpus=2 \
  ai-agent-sandbox

# macOS
brew install firejail

# Linux
sudo apt install firejail

# /etc/firejail/claude-code.profile
include /etc/firejail/default.profile
net none
private-tmp
private-dev
read-only ~/.ssh
blacklist ~/.aws
blacklist ~/.config/gcloud
whitelist ~/projects

firejail --profile=claude-code.profile claude

rules:
  - pattern: "rm -rf"
    require_approval: true
    approvers: ["tech-lead"]
  - pattern: "git push.*main|master"
    require_approval: true
  - pattern: "curl.*\\|.*sh"
    require_approval: true
    message: "检测到 curl pipe bash 模式"
  - pattern: "pip install|npm install -g"
    require_approval: true