least-authority: Export default preserved environment variables.

* guix/least-authority.scm (%precious-variables): Rename to...
(%default-preserved-environment-variables): ... this, and export it.
(least-authority-wrapper): Adjust accordingly.

Change-Id: Idd259b15463920965f530e1917d76bf97def3b7b
This commit is contained in:
Maxim Cournoyer 2025-04-03 15:43:24 +09:00
parent d5fc8668f4
commit b444fc05b5
No known key found for this signature in database
GPG key ID: 1260E46482E63562

View file

@ -26,7 +26,8 @@
spec->file-system
file-system->spec
file-system-mapping->bind-mount)
#:export (least-authority-wrapper))
#:export (least-authority-wrapper
%default-preserved-environment-variables))
;;; Commentary:
;;;
@ -35,7 +36,7 @@
;;;
;;; Code:
(define %precious-variables
(define %default-preserved-environment-variables
;; Environment variables preserved by the wrapper by default.
'("HOME" "USER" "LOGNAME" "DISPLAY" "XAUTHORITY" "TERM" "TZ" "PAGER"
"LISTEN_PID" "LISTEN_FDS" "LISTEN_FDNAMES")) ;for make-systemd-constructor
@ -50,7 +51,7 @@
(namespaces %namespaces)
(directory "/")
(preserved-environment-variables
%precious-variables))
%default-preserved-environment-variables))
"Return a wrapper of PROGRAM that executes it with the least authority.
PROGRAM is executed in separate namespaces according to NAMESPACES, a list of