dtc: fix sandboxing

2024-09-27 10:46:36 +00:00
parent 518180fd61
commit 2f49f0a2cf
1 changed files with 2 additions and 1 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -508,7 +508,8 @@ in
      "tmp"
    ];

-    dtc.sandbox.autodetectCliPaths = "existingFile";  # TODO:sandbox: untested
+    # dtc -o may write a file, so needs directory access
+    dtc.sandbox.autodetectCliPaths = "existingFileOrParent";

    duplicity = {};