forked from colin/nix-files
programs: sane-sudo-redirect: disable sandbox
This commit is contained in:
parent
f785ccd351
commit
41b1a013d7
@ -128,6 +128,9 @@ in
|
||||
extraPaths = [ "/nix/var/nix" ];
|
||||
};
|
||||
|
||||
# if `tee` isn't trustworthy we have bigger problems
|
||||
"sane-scripts.sudo-redirect".sandbox.enable = false;
|
||||
|
||||
"sane-scripts.which".sandbox = {
|
||||
method = "bwrap";
|
||||
wrapperType = "wrappedDerivation";
|
||||
|
@ -14,4 +14,4 @@
|
||||
# $ sudo do_thing | sane-sudo-redirect /into/file
|
||||
# ```
|
||||
|
||||
exec sudo tee $@ > /dev/null
|
||||
exec sudo tee "$@" > /dev/null
|
||||
|
Loading…
Reference in New Issue
Block a user