add special devices to sandbox-defaults

2015-10-30 20:32:11 -07:00
parent b83fb35f79
commit 95c66cc950
1 changed files with 4 additions and 1 deletions
@@ -35,7 +35,10 @@
       (literal "/private/var/run/resolv.conf"))

 ; some builders use filehandles other than stdin/stdout
-(allow file* (subpath "/dev/fd"))
+(allow file*
+        (subpath "/dev/fd")
+        (literal "/dev/ptmx")
+        (regex #"^/dev/[pt]ty.*$"))

 ; allow everything inside TMP
 (allow file* process-exec