sandbox: allow pty devices

Nix now runs builds with a pseudo-terminal to enable colored build
output.
This commit is contained in:
Daiderd Jordan 2020-03-20 21:58:45 +01:00
parent 7f2df903d9
commit f6c122aaeb
No known key found for this signature in database
GPG key ID: D02435D05B810C96

View file

@ -71,6 +71,12 @@
(literal "/dev/zero") (literal "/dev/zero")
(subpath "/dev/fd")) (subpath "/dev/fd"))
; Allow pseudo-terminals.
(allow file*
(literal "/dev/ptmx")
(regex #"^/dev/pty[a-z]+")
(regex #"^/dev/ttys[0-9]+"))
; Does nothing, but reduces build noise. ; Does nothing, but reduces build noise.
(allow file* (literal "/dev/dtracehelper")) (allow file* (literal "/dev/dtracehelper"))