public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nix.conf: Set sandbox-fallback = false

Browse Source 
For security, we don't want the sandbox to be disabled silently.
This commit is contained in:
Eelco Dolstra 2019-08-27 21:17:20 +02:00
parent fa29f98bb5
commit 35c1c170d7
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
nixos/modules/services/misc/nix-daemon.nix
View File

@ -8,7 +8,9 @@ let
nix = cfg.package.out; nix = cfg.package.out;
isNix20 = versionAtLeast (getVersion nix) "2.0pre"; nixVersion = getVersion nix;
isNix20 = versionAtLeast nixVersion "2.0pre";
makeNixBuildUser = nr: makeNixBuildUser = nr:
{ name = "nixbld${toString nr}"; { name = "nixbld${toString nr}";
@ -61,6 +63,9 @@ let
builders = builders =
''} ''}
system-features = ${toString cfg.systemFeatures} system-features = ${toString cfg.systemFeatures}
${optionalString (versionAtLeast nixVersion "2.3pre") ''
sandbox-fallback = false
''}
$extraOptions $extraOptions
END END
'' + optionalString cfg.checkConfig ( '' + optionalString cfg.checkConfig (