diff options
| author | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2015-02-23T13·41+0100 |
|---|---|---|
| committer | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2015-02-23T14·54+0100 |
| commit | 15d2d3c34e454fb7795998a3a2d73010dfbdec38 (patch) | |
| tree | 677224a9270e2f70112f58ab7adf8956c293e8fc /src/libexpr/nixexpr.hh | |
| parent | 47bdc52c1bf7bcec0ea1b685cf4c22b6b93be06d (diff) | |
Add restricted evaluation mode
If ‘--option restrict-eval true’ is given, the evaluator will throw an exception if an attempt is made to access any file outside of the Nix search path. This is primarily intended for Hydra, where we don't want people doing ‘builtins.readFile ~/.ssh/id_dsa’ or stuff like that.
Diffstat (limited to 'src/libexpr/nixexpr.hh')
| -rw-r--r-- | src/libexpr/nixexpr.hh | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/libexpr/nixexpr.hh b/src/libexpr/nixexpr.hh index 121dc58f25f7..ef07d4557fe8 100644 --- a/src/libexpr/nixexpr.hh +++ b/src/libexpr/nixexpr.hh @@ -16,6 +16,7 @@ MakeError(ThrownError, AssertionError) MakeError(Abort, EvalError) MakeError(TypeError, EvalError) MakeError(UndefinedVarError, Error) +MakeError(RestrictedPathError, Error) /* Position objects. */ |