sandbox: allow pty devices

Nix now runs builds with a pseudo-terminal to enable colored build output.
2020-03-20 21:58:45 +01:00 · 2020-03-20 21:58:45 +01:00 · f6c122aaeb
parent 7f2df903d9
commit f6c122aaeb
1 changed files with 6 additions and 0 deletions
--- a/src/libstore/sandbox-defaults.sb
+++ b/src/libstore/sandbox-defaults.sb
@ -71,6 +71,12 @@
       (literal "/dev/zero")
       (subpath "/dev/fd"))

+; Allow pseudo-terminals.
+(allow file*
+       (literal "/dev/ptmx")
+       (regex #"^/dev/pty[a-z]+")
+       (regex #"^/dev/ttys[0-9]+"))
+
 ; Does nothing, but reduces build noise.
 (allow file* (literal "/dev/dtracehelper"))