nix/8.nix-darwin
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sandbox: add module for sandbox profiles

Browse source 
This could be used outside of nix-darwin, but this is mainly useful for
services since all of the inputs are known there.

	{
	  # $ /usr/bin/sandbox-exec -f $profile $coreutils/bin/ls /
	  # ls: cannot access '/': Operation not permitted
	  security.sandbox.profiles.example.closure = [ pkgs.coreutils ];
	}
This commit is contained in:
Daiderd Jordan 2019-02-16 16:18:52 +01:00
parent 10c34f1277
commit 1e67f6a2bc
No known key found for this signature in database
GPG key ID: D02435D05B810C96
2 changed files with 132 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
default.nix
View file

@ -20,6 +20,7 @@ let
packages
./modules/alias.nix
./modules/security/pki
./modules/security/sandbox
./modules/system
./modules/system/checks.nix
./modules/system/activation-scripts.nix