nix/src/libstore/sandbox-minimal.sb

mirror of https://github.com/NixOS/nix synced 2024-09-21 11:30:30 -04:00
(allow default)

; Disallow creating setuid/setgid binaries, since that
; would allow breaking build user isolation.
(deny file-write-setugid)
Always use the Darwin sandbox Even with "build-use-sandbox = false", we now use sandboxing with a permissive profile that allows everything except the creation of setuid/setgid binaries. 2017-06-06 12:44:49 -04:00			`(allow default)`

			`; Disallow creating setuid/setgid binaries, since that`
			`; would allow breaking build user isolation.`
			`(deny file-write-setugid)`