Report whether an already resolved path is inside the sandbox root without resolving it again, as for a path the kernel reported for an open descriptor.
Server configuration carrying the optional sandbox root.
Absolute path with every symlink already resolved.
True when no sandbox root is configured or the path is inside it.
FileAccessError when the configured sandbox root does not exist.
Report whether an already resolved path is inside the sandbox root without resolving it again, as for a path the kernel reported for an open descriptor.