max/nix-super
1
0
Fork 0
mirror of https://github.com/privatevoid-net/nix-super.git synced 2025-02-07 18:57:19 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Allow access to /dev/stderr in Darwin sandbox

Browse source 
We allow /dev/stdout, so why not this? Since it is process-local,
anyway, should not be possible to escape sandbox using it.
This commit is contained in:
Andrew Marshall 2023-12-18 19:33:20 -05:00
parent 5d5b25f2e3
commit 7526b7ded6
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/libstore/build/sandbox-defaults.sb
View file

@ -68,6 +68,7 @@ R""(
(allow file* (allow file*
(literal "/dev/null") (literal "/dev/null")
(literal "/dev/random") (literal "/dev/random")
(literal "/dev/stderr")
(literal "/dev/stdin") (literal "/dev/stdin")
(literal "/dev/stdout") (literal "/dev/stdout")
(literal "/dev/tty") (literal "/dev/tty")