Greywall and pi: the built-in profile is not enough

Wed, 19 Aug 2026 09:34:00 +0200

pi has no permission system, and it does not hide it: its README says so explicitly (“Pi does not include a built-in permission system for restricting filesystem, process, network, or credential access”), and it sends you straight to a sandbox if you want one (“If you need stronger boundaries, containerize or sandbox Pi”). I am assuming that is exactly what you are looking for if you are reading this article, so let us get to it.

Greywall et pi : le profil intégré ne suffit pas

Wed, 19 Aug 2026 09:34:00 +0200

pi n’a pas de système de permissions, et il ne s’en cache pas : son README le dit en toutes lettres (« Pi does not include a built-in permission system for restricting filesystem, process, network, or credential access »), et il vous renvoie directement vers une sandbox si vous en voulez une (« If you need stronger boundaries, containerize or sandbox Pi »). Je pars du principe que c’est exactement ce que vous cherchez si vous lisez cet article, donc allons-y.

Greywall on Mathias WOLFF

Greywall and pi: the built-in profile is not enough

Greywall et pi : le profil intégré ne suffit pas