diff options
author | aszlig <aszlig@nix.build> | 2020-09-11 18:34:13 +0200 |
---|---|---|
committer | aszlig <aszlig@nix.build> | 2020-09-11 18:47:53 +0200 |
commit | 877fb29635370f3ebbdfd0211460bc66347269ea (patch) | |
tree | aed068f654a39ab43306920ee510e28c4a870e80 /pkgs/build-support/build-sandbox/src/path-cache.cc | |
parent | d7f2e2f0b32717d75e7968ab638aec8136f7803e (diff) |
sandbox: Allow to enable/disable namespaces
While the sandbox was initially written for games, I now use the implementation for other things, such as sandboxing database management systems inside "nix develop". However, both MariaDB and PostgreSQL do not like it very much if for example IPC is too restricted and if the PID file contains the PID of the process inside the namespace. Additionally I always wanted to have a way to enable network namespaces for games as well, so this is a good occasion to make them configurable. Of course, since we need the mount and user namespaces to implement our sandbox in the first place, we can't allow users to disable these namespaces, but for everything else, we now have a new "namespaces" attribute. Signed-off-by: aszlig <aszlig@nix.build>
Diffstat (limited to 'pkgs/build-support/build-sandbox/src/path-cache.cc')
0 files changed, 0 insertions, 0 deletions