From 66495818a3797616d14f2c54845bf5265cf4a5e7 Mon Sep 17 00:00:00 2001
From: Daiderd Jordan <daiderd@gmail.com>
Date: Sat, 4 May 2019 14:46:24 +0200
Subject: sandbox: add missing option descriptions

---
 modules/security/sandbox/default.nix | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'modules/security')

diff --git a/modules/security/sandbox/default.nix b/modules/security/sandbox/default.nix
index bd8050f..6f47720 100644
--- a/modules/security/sandbox/default.nix
+++ b/modules/security/sandbox/default.nix
@@ -11,6 +11,7 @@ let
       options = {
         profile = mkOption {
           type = types.lines;
+          internal = true;
           apply = text: pkgs.runCommandNoCC "sandbox.sb" {} ''
             for f in $(< ${config.closure}/store-paths); do
                 storePaths+="(subpath \"$f\")"
@@ -44,6 +45,7 @@ let
         allowSystemPaths = mkOption {
           type = types.bool;
           default = false;
+          description = "Whether to allow read access to FHS paths like /etc and /var.";
         };
 
         allowLocalNetworking = mkOption {
-- 
cgit v1.2.3