3 commits

Author	SHA1	Message	Date
Daiderd Jordan	0a8785c61b	lnl: start tmux panes in a sandbox by default	2019-02-16 21:33:17 +01:00
Daiderd Jordan	1464d9efd3	lnl: sandbox fetch-nixpkgs-updates service	2019-02-16 17:47:29 +01:00
Daiderd Jordan	1e67f6a2bc	sandbox: add module for sandbox profiles ... This could be used outside of nix-darwin, but this is mainly useful for services since all of the inputs are known there. { # $ /usr/bin/sandbox-exec -f $profile $coreutils/bin/ls / # ls: cannot access '/': Operation not permitted security.sandbox.profiles.example.closure = [ pkgs.coreutils ]; }	2019-02-16 16:55:07 +01:00