Colin 029ba43bd6 modules/programs: sane-sandboxed: invoke "capsh" with the --no-new-privs argument

2024-02-16 05:48:50 +00:00

..

default.nix

modules/programs: sandboxing: add a "whitelistX" option

2024-02-15 00:09:16 +00:00

make-sandbox-profile.nix

modules/programs: rename allowedRootPaths -> allowedPaths

2024-02-12 13:00:10 +00:00

make-sandboxed.nix

modules/programs: make-sandboxed: support /libexec binaries

2024-02-16 03:15:45 +00:00

sane-sandboxed

modules/programs: sane-sandboxed: invoke "capsh" with the --no-new-privs argument

2024-02-16 05:48:50 +00:00

sane-sandboxed.nix

sane-sandboxed: load profiles via $NIX_PROFILES env var

2024-02-12 10:37:26 +00:00