Merge pull request #10971 from NixOS/user-sandbox-escape-post

Slight fixes to get CI passing again
NixOS · Jun 27, 2024 · ed12926 · ed12926
2 parents 2dd7f8f + 88f9d8c
commit ed12926
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 1 deletion.
diff --git a/doc/manual/rl-next/harden-user-sandboxing.md b/doc/manual/rl-next/harden-user-sandboxing.md
@@ -2,7 +2,6 @@
 synopsis: Harden the user sandboxing
 significance: significant
 issues:
-prs: <only provided once merged>
 ---
 
 The build directory has been hardened against interference with the outside world by nesting it inside another directory owned by (and only readable by) the daemon user.
diff --git a/maintainers/flake-module.nix b/maintainers/flake-module.nix
@@ -429,6 +429,7 @@
             ''^tests/functional/test-libstoreconsumer/main\.cc''
             ''^tests/nixos/ca-fd-leak/sender\.c''
             ''^tests/nixos/ca-fd-leak/smuggler\.c''
+            ''^tests/nixos/user-sandboxing/attacker\.c''
             ''^tests/unit/libexpr-support/tests/libexpr\.hh''
             ''^tests/unit/libexpr-support/tests/value/context\.cc''
             ''^tests/unit/libexpr-support/tests/value/context\.hh''