diff --git a/installer/sandbox.c b/installer/sandbox.c
index 348189d6f..9d3a7c928 100644
--- a/installer/sandbox.c
+++ b/installer/sandbox.c
@@ -108,7 +108,7 @@ int connect(int sockfd, const struct sockaddr *addr, socklen_t addrlen) {
 
     if (banned_env && *banned_env && match_env_patterns(ip, banned_env)) {
         fprintf(stderr, "[sandbox] 🚫 Access to host %s is banned\n", ip);
-        errno = EACCES;
+        errno = EACCES; // EACCES 的值是 13, 意思是 Permission denied
         return -1;
     }