# look_inside.sh - who are you in there, and what can you touch?
openshell sandbox exec -n demo -- whoami
openshell sandbox exec -n demo -- pwd
openshell sandbox exec -n demo -- uname -r
openshell sandbox exec -n demo -- grep Cap /proc/self/status

# Two folders you may write in. One you may read but not change. One you may not open.
openshell sandbox exec -n demo -- sh -c 'echo hello > /sandbox/note.txt && cat /sandbox/note.txt'
openshell sandbox exec -n demo -- sh -c 'echo hello > /tmp/note.txt && cat /tmp/note.txt'
openshell sandbox exec -n demo -- head -1 /etc/os-release
openshell sandbox exec -n demo -- sh -c 'echo hello > /etc/note.txt'
openshell sandbox exec -n demo -- ls /home

# The rules that gave those answers.
openshell policy get demo --base