Merge branch 'sandbox-profiles' of git://github.com/pikajude/nix

Temporarily allow derivations to describe their full sandbox profile.
This will be eventually scaled back to a more secure setup, see the
discussion at #695

1 files changed, 4 insertions, 0 deletions

diff --git a/release.nix b/release.nix
index 4269a3f76d8c..8935cfa19680 100644
--- a/release.nix
+++ b/release.nix
@@ -97,6 +97,10 @@ let
 
         enableParallelBuilding = true;
 
+        __sandboxProfile = lib.sandbox.allowFileRead [
+          "/etc" "/etc/nix/nix.conf" "/private/etc/nix/nix.conf"
+        ];
+
         makeFlags = "profiledir=$(out)/etc/profile.d";
 
         preBuild = "unset NIX_INDENT_MAKE";