summaryrefslogtreecommitdiff
path: root/modules/security/sandbox
diff options
context:
space:
mode:
authorJames Walker <walkah@walkah.net>2022-09-25 14:12:08 -0400
committerJames Walker <walkah@walkah.net>2022-09-25 14:12:08 -0400
commita2a9f30fee9d74c7129aa50d638245b62f80d8c6 (patch)
treefaa5b1c3de6f4976bd0e633c5ee9d46cae839a90 /modules/security/sandbox
parent088c98a584a38b5f844bb9e9cd32eb28479ca6d7 (diff)
rename runCommandNoCC
Diffstat (limited to 'modules/security/sandbox')
-rw-r--r--modules/security/sandbox/default.nix13
1 files changed, 6 insertions, 7 deletions
diff --git a/modules/security/sandbox/default.nix b/modules/security/sandbox/default.nix
index 6f47720..d6987e6 100644
--- a/modules/security/sandbox/default.nix
+++ b/modules/security/sandbox/default.nix
@@ -12,7 +12,7 @@ let
profile = mkOption {
type = types.lines;
internal = true;
- apply = text: pkgs.runCommandNoCC "sandbox.sb" {} ''
+ apply = text: pkgs.runCommand "sandbox.sb" { } ''
for f in $(< ${config.closure}/store-paths); do
storePaths+="(subpath \"$f\")"
done
@@ -25,20 +25,20 @@ let
closure = mkOption {
type = types.listOf types.package;
- default = [];
+ default = [ ];
apply = paths: pkgs.closureInfo { rootPaths = paths; };
description = "List of store paths to make accessible.";
};
readablePaths = mkOption {
type = types.listOf types.path;
- default = [];
+ default = [ ];
description = "List of paths that should be read-only inside the sandbox.";
};
writablePaths = mkOption {
type = types.listOf types.path;
- default = [];
+ default = [ ];
description = "List of paths that should be read/write inside the sandbox.";
};
@@ -132,11 +132,10 @@ in
options = {
security.sandbox.profiles = mkOption {
type = types.attrsOf (types.submodule profile);
- default = {};
+ default = { };
description = "Definition of sandbox profiles.";
};
};
- config = {
- };
+ config = { };
}