From d613a856fb43199ecedb3f2ea97a0ea76094981d Mon Sep 17 00:00:00 2001
From: jjudd <james@lab-y.com>
Date: Wed, 30 Oct 2024 16:51:53 -0600
Subject: [PATCH] Enable worker sandbox hardening and the Linux hermetic
 sandbox

---
 .bazelrc_shared | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.bazelrc_shared b/.bazelrc_shared
index 057b8e95..a23155a4 100644
--- a/.bazelrc_shared
+++ b/.bazelrc_shared
@@ -18,6 +18,9 @@ build --experimental_worker_multiplex_sandboxing
 build --experimental_worker_cancellation
 build --verbose_failures
 
+build --experimental_worker_sandbox_hardening
+build --experimental_use_hermetic_linux_sandbox
+
 test --test_output=all
 
 build:rules --disk_cache=.bazel_cache