src/libstore/build/sandbox-minimal.sb


1
2
3
4
5
6
7
8
9

R""(

(allow default)

; Disallow creating setuid/setgid binaries, since that
; would allow breaking build user isolation.
(deny file-write-setugid)

)""