1
0
Fork 0
mirror of https://github.com/NixOS/nix synced 2024-09-19 23:03:53 -04:00

add special devices to sandbox-defaults

This commit is contained in:
Jude Taylor 2015-10-30 20:32:11 -07:00
parent b83fb35f79
commit 95c66cc950

View file

@ -35,7 +35,10 @@
(literal "/private/var/run/resolv.conf"))
; some builders use filehandles other than stdin/stdout
(allow file* (subpath "/dev/fd"))
(allow file*
(subpath "/dev/fd")
(literal "/dev/ptmx")
(regex #"^/dev/[pt]ty.*$"))
; allow everything inside TMP
(allow file* process-exec