maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(3p/nix): remove allow-unsafe-native-code-during-evaluation

Browse source 
This formerly controlled access to builtins.exec and
builtins.importNative, but both of those are gone now, so there's no
need for this option any more.

Change-Id: I6850cbd6be264fbfb1b209a60026dadbd0ba1232
Reviewed-on: https://cl.tvl.fyi/c/depot/+/1341
Reviewed-by: glittershark <grfn@gws.fyi>
Tested-by: BuildkiteCI
This commit is contained in:
Alyssa Ross 2020-07-21 23:38:31 +00:00
parent 2d53aad13a
commit 5183e92e4f
1 changed files with 0 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

5
third_party/nix/src/libexpr/eval.hh vendored
View file

@ -331,11 +331,6 @@ struct InvalidPathError : EvalError {
}; };
struct EvalSettings : Config { struct EvalSettings : Config {
Setting<bool> enableNativeCode{this, false,
"allow-unsafe-native-code-during-evaluation",
"Whether builtin functions that allow "
"executing native code should be enabled."};
Setting<bool> restrictEval{ Setting<bool> restrictEval{
this, false, "restrict-eval", this, false, "restrict-eval",
"Whether to restrict file system access to paths in $NIX_PATH, " "Whether to restrict file system access to paths in $NIX_PATH, "