about summary refs log tree commit diff
path: root/src/libstore/sandbox-defaults.sb
diff options
context:
space:
mode:
authorEelco Dolstra <edolstra@gmail.com>2018-05-09T13·45+0200
committerEelco Dolstra <edolstra@gmail.com>2018-05-09T13·45+0200
commita91c4ca01f720711d80a6f7d16ead70ce8f5f741 (patch)
tree8846f467aa1e4b1301de37b11b5c1e4cd3a13842 /src/libstore/sandbox-defaults.sb
parenta1adcdf0878501b512d7ab98d713167f035a330d (diff)
In restricted eval mode, allow access to the closure of store paths
E.g. this makes

  nix eval --restrict-eval -I /nix/store/foo '(builtins.readFile "/nix/store/foo/symlink/bla")'

(where /nix/store/foo/symlink is a symlink to another path in the
closure of /nix/store/foo) succeed.

This fixes a regression in Hydra compared to Nix 1.x (where there were
no restrictions at all on access to the Nix store).
Diffstat (limited to 'src/libstore/sandbox-defaults.sb')
0 files changed, 0 insertions, 0 deletions