puck/lix
0
0
Fork 0
forked from lix-project/lix
Code Pull requests Activity

Allow access to /dev/stderr in Darwin sandbox

Browse source 
We allow /dev/stdout, so why not this? Since it is process-local,
anyway, should not be possible to escape sandbox using it.
This commit is contained in:
Andrew Marshall 2023-12-18 19:33:20 -05:00
parent 5d5b25f2e3
commit 7526b7ded6
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/libstore/build/sandbox-defaults.sb
View file

@ -68,6 +68,7 @@ R""(
(allow file* (allow file*
(literal "/dev/null") (literal "/dev/null")
(literal "/dev/random") (literal "/dev/random")
(literal "/dev/stderr")
(literal "/dev/stdin") (literal "/dev/stdin")
(literal "/dev/stdout") (literal "/dev/stdout")
(literal "/dev/tty") (literal "/dev/tty")