modules/programs: rename allowedRootPaths -> allowedPaths

now that allowedHomePaths doesn't exist
This commit is contained in:
Colin 2024-02-12 13:00:10 +00:00
parent 14d8230821
commit b0394d877d
2 changed files with 4 additions and 4 deletions

View File

@ -71,7 +71,7 @@ let
(p: path-lib.concat [ xdgRuntimeDir p ])
sandbox.extraRuntimePaths
);
allowedRootPaths = [
allowedPaths = [
"/nix/store"
"/bin/sh"
@ -103,7 +103,7 @@ let
vpn.dns
else
null;
allowedRootPaths = expandSymlinks allowedRootPaths;
allowedPaths = expandSymlinks allowedPaths;
};
in
makeSandboxed {

View File

@ -3,7 +3,7 @@
{ pkgName
, method
, allowedRootPaths ? []
, allowedPaths ? []
, autodetectCliPaths ? false
, capabilities ? []
, dns ? null
@ -34,7 +34,7 @@ let
"--sane-sandbox-method" method
]
++ netItems
++ allowPaths allowedRootPaths
++ allowPaths allowedPaths
++ capabilityFlags
++ lib.optionals (autodetectCliPaths != null) [ "--sane-sandbox-autodetect" autodetectCliPaths ]
++ lib.optionals whitelistPwd [ "--sane-sandbox-add-pwd" ]