amaharaneko/guix-mirrors
1
1
Fork 0
mirror of https://codeberg.org/guix/guix.git synced 2025-10-02 02:15:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

least-authority: Export default preserved environment variables.

Browse source 
* guix/least-authority.scm (%precious-variables): Rename to...
(%default-preserved-environment-variables): ... this, and export it.
(least-authority-wrapper): Adjust accordingly.

Change-Id: Idd259b15463920965f530e1917d76bf97def3b7b
This commit is contained in:
Maxim Cournoyer 2025-04-03 15:43:24 +09:00
parent d5fc8668f4
commit b444fc05b5
No known key found for this signature in database
GPG key ID: 1260E46482E63562
1 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
guix/least-authority.scm
View file

@ -26,7 +26,8 @@
spec->file-system spec->file-system
file-system->spec file-system->spec
file-system-mapping->bind-mount) file-system-mapping->bind-mount)
#:export (least-authority-wrapper)) #:export (least-authority-wrapper
%default-preserved-environment-variables))
;;; Commentary: ;;; Commentary:
;;; ;;;
@ -35,7 +36,7 @@
;;; ;;;
;;; Code: ;;; Code:
(define %precious-variables (define %default-preserved-environment-variables
;; Environment variables preserved by the wrapper by default. ;; Environment variables preserved by the wrapper by default.
'("HOME" "USER" "LOGNAME" "DISPLAY" "XAUTHORITY" "TERM" "TZ" "PAGER" '("HOME" "USER" "LOGNAME" "DISPLAY" "XAUTHORITY" "TERM" "TZ" "PAGER"
"LISTEN_PID" "LISTEN_FDS" "LISTEN_FDNAMES")) ;for make-systemd-constructor "LISTEN_PID" "LISTEN_FDS" "LISTEN_FDNAMES")) ;for make-systemd-constructor
@ -50,7 +51,7 @@
(namespaces %namespaces) (namespaces %namespaces)
(directory "/") (directory "/")
(preserved-environment-variables (preserved-environment-variables
%precious-variables)) %default-preserved-environment-variables))
"Return a wrapper of PROGRAM that executes it with the least authority. "Return a wrapper of PROGRAM that executes it with the least authority.
PROGRAM is executed in separate namespaces according to NAMESPACES, a list of PROGRAM is executed in separate namespaces according to NAMESPACES, a list of