aszlig 46f7dd436f
nixos/confinement: Allow to configure /bin/sh
Another thing requested by @edolstra in [1]:

  We should not provide a different /bin/sh in the chroot, that's just
  asking for confusion and random shell script breakage. It should be
  the same shell (i.e. bash) as in a regular environment.

While I personally would even go as far to even have a very restricted
shell that is not even a shell and basically *only* allows "/bin/sh -c"
with only *very* minimal parsing of shell syntax, I do agree that people
expect /bin/sh to be bash (or the one configured by environment.binsh)
on NixOS.

So this should make both others and me happy in that I could just use
confinement.binSh = "${pkgs.dash}/bin/dash" for the services I confine.

[1]: https://github.com/NixOS/nixpkgs/pull/57519#issuecomment-472855704

Signed-off-by: aszlig <aszlig@nix.build>
2019-03-14 19:14:05 +01:00
..
2018-09-21 09:22:03 +02:00
2018-08-31 21:19:53 -05:00
2018-11-29 20:27:47 -06:00
2018-08-03 09:40:32 +02:00
2018-04-12 01:35:14 +02:00
2018-09-21 01:17:41 +02:00
2019-01-28 00:15:00 +01:00
2019-02-11 03:13:03 +01:00
2018-02-14 22:43:59 +01:00
2018-12-09 18:29:51 +01:00
2018-12-05 00:06:07 +00:00
2018-08-29 19:38:00 +02:00
2018-11-25 14:24:10 +01:00
2019-02-11 03:12:56 +01:00
2019-02-01 16:01:08 +01:00
2018-04-04 18:26:41 +03:00
2018-04-30 16:49:38 +02:00
2018-06-24 16:10:32 +02:00
2019-01-24 20:54:14 +00:00
2018-10-28 19:13:12 +00:00
2019-02-05 11:51:33 +00:00
2018-11-15 23:44:16 +09:00
2018-12-09 13:36:53 +01:00
2017-07-16 10:06:42 +01:00
2019-01-21 11:37:20 +00:00
2018-08-24 15:48:39 +02:00