manage-mounts

You can restrict agent container access by maintaining a per-user mount allowlist. This ensures containers only access approved host paths, preventing unauthorized directory reads or writes across macOS and Linux environments.

A host directory mount allowlist is a configuration list that defines which specific host paths agent containers are permitted to access. It enforces security boundaries by limiting container visibility to only approved directories.

You can add or remove approved paths from your container mount allowlist using dedicated configuration operations. The system supports adding directories, removing directories, showing the current config, and resetting the list to empty.

Yes, you can manage container host directory mounts on both macOS and Linux. The configuration system applies the mount allowlist operations across both operating systems, ensuring consistent access restrictions in multi-user environments.

A mount allowlist is needed for multi-user development environments to isolate agents. By restricting containers to approved paths, it prevents agents from accessing sensitive host directories belonging to other users or the system.