Hello, very new to GRIST. I have downloaded the GRIST DESKTOP version 0.3 to my mac (using the x64 intel installer from GitHub). Everything installs itself, and works fine, however as I learn more about the program I realize there is a need for Sandboxing this software… however I do not know if this applies to my case and/or installation method. I have seen this discussed in reference to self hosted grist-core installations which are still just above my pay grade at the moment, however I haven’t seen this specifically addressed for the Mac Desktop software.
I have no virtual machine software running this, as it operates like a standalone app. So my rookie level question, is sandboxing a concern for me and if so is it automatically enabled in this standalone app environment?
I only ask because when I click on “Admin Panel > Self-Checks > more… > sandboxing” there is a green check for “Is document sandboxing effective”, but within the DETAILS table, it says
flavor = pyodide
cofigured = true
functional = true
effective = true
sandboxed = false (?? this is what is confusing me. Is this right?)
lastSuccessfulStep = all
I’ve also seen others suggesting universal setting variables as a solution (setting to gvisor?), however I am not sure where to enter this (or if it applies to me) while using the mac desktop version.
Any quick clarifications would be very helpful and appreciated to get me on the right track (security wise) from the beginning.