summaryrefslogtreecommitdiff
path: root/modules/security/sandbox/default.nix
diff options
context:
space:
mode:
authorMike Vink <59492084+ivi-vink@users.noreply.github.com>2025-01-16 22:22:34 +0100
committerGitHub <noreply@github.com>2025-01-16 22:22:34 +0100
commit8e7bd91f353caacc0bc4105f573eb3e17f09e03a (patch)
treec5059edcbebd9644290cad7c653c49a36d593021 /modules/security/sandbox/default.nix
parent6bd39d420578aacf7c0bab7de3e7027b952115ae (diff)
parentbd921223ba7cdac346477d7ea5204d6f4736fcc6 (diff)
Merge branch 'LnL7:master' into masterHEADmaster
Diffstat (limited to 'modules/security/sandbox/default.nix')
-rw-r--r--modules/security/sandbox/default.nix14
1 files changed, 7 insertions, 7 deletions
diff --git a/modules/security/sandbox/default.nix b/modules/security/sandbox/default.nix
index a80c9f6..d6987e6 100644
--- a/modules/security/sandbox/default.nix
+++ b/modules/security/sandbox/default.nix
@@ -27,37 +27,37 @@ let
type = types.listOf types.package;
default = [ ];
apply = paths: pkgs.closureInfo { rootPaths = paths; };
- description = lib.mdDoc "List of store paths to make accessible.";
+ description = "List of store paths to make accessible.";
};
readablePaths = mkOption {
type = types.listOf types.path;
default = [ ];
- description = lib.mdDoc "List of paths that should be read-only inside the sandbox.";
+ description = "List of paths that should be read-only inside the sandbox.";
};
writablePaths = mkOption {
type = types.listOf types.path;
default = [ ];
- description = lib.mdDoc "List of paths that should be read/write inside the sandbox.";
+ description = "List of paths that should be read/write inside the sandbox.";
};
allowSystemPaths = mkOption {
type = types.bool;
default = false;
- description = lib.mdDoc "Whether to allow read access to FHS paths like /etc and /var.";
+ description = "Whether to allow read access to FHS paths like /etc and /var.";
};
allowLocalNetworking = mkOption {
type = types.bool;
default = false;
- description = lib.mdDoc "Whether to allow localhost network access inside the sandbox.";
+ description = "Whether to allow localhost network access inside the sandbox.";
};
allowNetworking = mkOption {
type = types.bool;
default = false;
- description = lib.mdDoc "Whether to allow network access inside the sandbox.";
+ description = "Whether to allow network access inside the sandbox.";
};
};
@@ -133,7 +133,7 @@ in
security.sandbox.profiles = mkOption {
type = types.attrsOf (types.submodule profile);
default = { };
- description = lib.mdDoc "Definition of sandbox profiles.";
+ description = "Definition of sandbox profiles.";
};
};