nix-super

5651 commits 7 branches 0 tags 64 MiB

Author	SHA1	Message	Date
Eelco Dolstra	85e93d7b87	Always use the Darwin sandbox Even with "build-use-sandbox = false", we now use sandboxing with a permissive profile that allows everything except the creation of setuid/setgid binaries.	2017-06-06 18:44:49 +02:00
Eelco Dolstra	c96e8cd097	OS X sandbox: Improve builtin sandbox profile Also, add rules to allow fixed-output derivations to access the network. These rules are sufficient to build stdenvDarwin without any __sandboxProfile magic.	2017-05-31 17:25:51 +02:00
Eelco Dolstra	acc889c821	Darwin sandbox: Use sandbox-defaults.sb Issue #759. Also, remove nix.conf from the sandbox since I don't really see a legitimate reason for builders to access the Nix configuration.	2017-05-30 17:40:12 +02:00

Author

SHA1

Message

Date

Eelco Dolstra

85e93d7b87

Always use the Darwin sandbox

Even with "build-use-sandbox = false", we now use sandboxing with a
permissive profile that allows everything except the creation of
setuid/setgid binaries.

2017-06-06 18:44:49 +02:00

Eelco Dolstra

c96e8cd097

OS X sandbox: Improve builtin sandbox profile

Also, add rules to allow fixed-output derivations to access the
network.

These rules are sufficient to build stdenvDarwin without any
__sandboxProfile magic.

2017-05-31 17:25:51 +02:00

Eelco Dolstra

acc889c821

Darwin sandbox: Use sandbox-defaults.sb

Issue #759.

Also, remove nix.conf from the sandbox since I don't really see a
legitimate reason for builders to access the Nix configuration.

2017-05-30 17:40:12 +02:00

Renamed from src/libstore/sandbox-defaults.sb.in (Browse further)

3 commits