fix(nix): make working directory writable

This commit is contained in:
Zexin Yuan 2026-04-20 09:56:47 +08:00 committed by Teknium
parent e8cba18f77
commit 15efb410d0

View file

@ -777,7 +777,10 @@ HERMES_NIX_ENV_EOF
NoNewPrivileges = true; NoNewPrivileges = true;
ProtectSystem = "strict"; ProtectSystem = "strict";
ProtectHome = false; ProtectHome = false;
ReadWritePaths = [ cfg.stateDir ]; ReadWritePaths = [
cfg.stateDir
cfg.workingDirectory
];
PrivateTmp = true; PrivateTmp = true;
}; };