picnoir/nix-gh
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Allow using /bin and /usr/bin as impure prefixes on non-darwin by default

Browse source 
These directories are generally world-readable anyway, and give us the two
most common linux impurities (env and sh)
This commit is contained in:
Shea Levy 2015-01-13 09:40:11 -05:00 committed by Eelco Dolstra
parent fcf57aad27
commit 79ca503332
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/libstore/build.cc
View file

@ -56,7 +56,7 @@
#define DEFAULT_ALLOWED_IMPURE_PREFIXES "/System/Library/Frameworks /usr/lib /dev /bin/sh"
#else
#define SANDBOX_ENABLED 0
#define DEFAULT_ALLOWED_IMPURE_PREFIXES ""
#define DEFAULT_ALLOWED_IMPURE_PREFIXES "/bin" "/usr/bin"
#endif
#if CHROOT_ENABLED