summaryrefslogtreecommitdiff
path: root/modules/security/sandbox
AgeCommit message (Collapse)Author
2024-04-19treewide: remove lib.mdDocWeijia Wang
2023-06-24treewide: convert all option docs to MarkdownEmily
This process was automated by [my fork of `nix-doc-munge`]; thanks to @pennae for writing this tool! It automatically checks that the resulting documentation doesn't change, although my fork loosens this a little to ignore some irrelevant whitespace and typographical differences. As of this commit there is no DocBook remaining in the options documentation. You can play along at home if you want to reproduce this commit: $ NIX_PATH=nixpkgs=flake:nixpkgs/c1bca7fe84c646cfd4ebf3482c0e6317a0b13f22 \ nix shell nixpkgs#coreutils \ -c find . -name '*.nix' \ -exec nix run github:emilazy/nix-doc-munge/0a7190f600027bf7baf6cb7139e4d69ac2f51062 \ {} + [my fork of `nix-doc-munge`]: https://github.com/emilazy/nix-doc-munge
2022-09-25rename runCommandNoCCJames Walker
2019-05-04sandbox: add missing option descriptionsDaiderd Jordan
2019-02-16lnl: start tmux panes in a sandbox by defaultDaiderd Jordan
2019-02-16lnl: sandbox fetch-nixpkgs-updates serviceDaiderd Jordan
2019-02-16sandbox: add module for sandbox profilesDaiderd Jordan
This could be used outside of nix-darwin, but this is mainly useful for services since all of the inputs are known there. { # $ /usr/bin/sandbox-exec -f $profile $coreutils/bin/ls / # ls: cannot access '/': Operation not permitted security.sandbox.profiles.example.closure = [ pkgs.coreutils ]; }