nixos/nix
1
1
Fork 0
mirror of https://github.com/NixOS/nix.git synced 2025-11-21 09:49:36 +01:00
Code Activity

Move macOS sandbox files to sr/libstore/build

Browse source
This commit is contained in:
Eelco Dolstra 2023-01-04 04:50:45 -08:00
parent 609a7dc059
commit 6991e558dd
3 changed files with 0 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/libstore/build/sandbox-minimal.sb Normal file
View file

@ -0,0 +1,9 @@
R""(
(allow default)
; Disallow creating setuid/setgid binaries, since that
; would allow breaking build user isolation.
(deny file-write-setugid)
)""