about summary refs log blame commit diff
path: root/third_party/nix/src/libstore/sandbox-minimal.sb
blob: 65f5108b399062731eddf70151dc6fb3aab085af (plain) (tree)
1
2
3
4
5



                                                      
(allow default)

; Disallow creating setuid/setgid binaries, since that
; would allow breaking build user isolation.
(deny file-write-setugid)