diff options
| author | Mike Vink <59492084+ivi-vink@users.noreply.github.com> | 2025-01-16 22:22:34 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-01-16 22:22:34 +0100 |
| commit | 8e7bd91f353caacc0bc4105f573eb3e17f09e03a (patch) | |
| tree | c5059edcbebd9644290cad7c653c49a36d593021 /modules/security/sandbox/default.nix | |
| parent | 6bd39d420578aacf7c0bab7de3e7027b952115ae (diff) | |
| parent | bd921223ba7cdac346477d7ea5204d6f4736fcc6 (diff) | |
Diffstat (limited to 'modules/security/sandbox/default.nix')
| -rw-r--r-- | modules/security/sandbox/default.nix | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/modules/security/sandbox/default.nix b/modules/security/sandbox/default.nix index a80c9f6..d6987e6 100644 --- a/modules/security/sandbox/default.nix +++ b/modules/security/sandbox/default.nix @@ -27,37 +27,37 @@ let type = types.listOf types.package; default = [ ]; apply = paths: pkgs.closureInfo { rootPaths = paths; }; - description = lib.mdDoc "List of store paths to make accessible."; + description = "List of store paths to make accessible."; }; readablePaths = mkOption { type = types.listOf types.path; default = [ ]; - description = lib.mdDoc "List of paths that should be read-only inside the sandbox."; + description = "List of paths that should be read-only inside the sandbox."; }; writablePaths = mkOption { type = types.listOf types.path; default = [ ]; - description = lib.mdDoc "List of paths that should be read/write inside the sandbox."; + description = "List of paths that should be read/write inside the sandbox."; }; allowSystemPaths = mkOption { type = types.bool; default = false; - description = lib.mdDoc "Whether to allow read access to FHS paths like /etc and /var."; + description = "Whether to allow read access to FHS paths like /etc and /var."; }; allowLocalNetworking = mkOption { type = types.bool; default = false; - description = lib.mdDoc "Whether to allow localhost network access inside the sandbox."; + description = "Whether to allow localhost network access inside the sandbox."; }; allowNetworking = mkOption { type = types.bool; default = false; - description = lib.mdDoc "Whether to allow network access inside the sandbox."; + description = "Whether to allow network access inside the sandbox."; }; }; @@ -133,7 +133,7 @@ in security.sandbox.profiles = mkOption { type = types.attrsOf (types.submodule profile); default = { }; - description = lib.mdDoc "Definition of sandbox profiles."; + description = "Definition of sandbox profiles."; }; }; |
