mirror of
https://github.com/NixOS/nix
synced 2025-07-17 18:38:28 +02:00
Always use the Darwin sandbox
Even with "build-use-sandbox = false", we now use sandboxing with a permissive profile that allows everything except the creation of setuid/setgid binaries.
This commit is contained in:
parent
d3f780996c
commit
85e93d7b87
5 changed files with 100 additions and 87 deletions
4
.gitignore
vendored
4
.gitignore
vendored
|
@ -48,9 +48,7 @@ perl/Makefile.config
|
|||
/src/libexpr/nix.tbl
|
||||
|
||||
# /src/libstore/
|
||||
/src/libstore/schema.sql.gen.hh
|
||||
/src/libstore/sandbox-defaults.sb.gen.hh
|
||||
/src/libstore/sandbox-network.sb.gen.hh
|
||||
/src/libstore/*.gen.hh
|
||||
|
||||
/src/nix/nix
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue