sandbox: allow pty devices

Nix now runs builds with a pseudo-terminal to enable colored build output.
domenkozar · Mar 20, 2020 · f6c122a · f6c122a
1 parent 7f2df90
commit f6c122a
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/libstore/sandbox-defaults.sb b/src/libstore/sandbox-defaults.sb
@@ -71,6 +71,12 @@
        (literal "/dev/zero")
        (subpath "/dev/fd"))
 
+; Allow pseudo-terminals.
+(allow file*
+       (literal "/dev/ptmx")
+       (regex #"^/dev/pty[a-z]+")
+       (regex #"^/dev/ttys[0-9]+"))
+
 ; Does nothing, but reduces build noise.
 (allow file* (literal "/dev/dtracehelper"))