modules/programs: rename allowedRootPaths -> allowedPaths
now that allowedHomePaths doesn't exist
This commit is contained in:
parent
14d8230821
commit
b0394d877d
|
@ -71,7 +71,7 @@ let
|
|||
(p: path-lib.concat [ xdgRuntimeDir p ])
|
||||
sandbox.extraRuntimePaths
|
||||
);
|
||||
allowedRootPaths = [
|
||||
allowedPaths = [
|
||||
"/nix/store"
|
||||
"/bin/sh"
|
||||
|
||||
|
@ -103,7 +103,7 @@ let
|
|||
vpn.dns
|
||||
else
|
||||
null;
|
||||
allowedRootPaths = expandSymlinks allowedRootPaths;
|
||||
allowedPaths = expandSymlinks allowedPaths;
|
||||
};
|
||||
in
|
||||
makeSandboxed {
|
||||
|
|
|
@ -3,7 +3,7 @@
|
|||
|
||||
{ pkgName
|
||||
, method
|
||||
, allowedRootPaths ? []
|
||||
, allowedPaths ? []
|
||||
, autodetectCliPaths ? false
|
||||
, capabilities ? []
|
||||
, dns ? null
|
||||
|
@ -34,7 +34,7 @@ let
|
|||
"--sane-sandbox-method" method
|
||||
]
|
||||
++ netItems
|
||||
++ allowPaths allowedRootPaths
|
||||
++ allowPaths allowedPaths
|
||||
++ capabilityFlags
|
||||
++ lib.optionals (autodetectCliPaths != null) [ "--sane-sandbox-autodetect" autodetectCliPaths ]
|
||||
++ lib.optionals whitelistPwd [ "--sane-sandbox-add-pwd" ]
|
||||
|
|
Loading…
Reference in New Issue