about summary refs log tree commit diff
path: root/src/libstore/sandbox-defaults.sb
AgeCommit message (Collapse)AuthorFilesLines
2017-06-06 Always use the Darwin sandboxEelco Dolstra1-0/+2
Even with "build-use-sandbox = false", we now use sandboxing with a permissive profile that allows everything except the creation of setuid/setgid binaries.
2017-05-31 OS X sandbox: Improve builtin sandbox profileEelco Dolstra1-50/+44
Also, add rules to allow fixed-output derivations to access the network. These rules are sufficient to build stdenvDarwin without any __sandboxProfile magic.
2017-05-30 Darwin sandbox: Use sandbox-defaults.sbEelco Dolstra1-0/+62
Issue #759. Also, remove nix.conf from the sandbox since I don't really see a legitimate reason for builders to access the Nix configuration.