filterSource is disallowed in restrict-eval

[roberth]

restrict-eval does not allow access to paths that are derived from the search path by filterSource.

Is there a reason to disallow this?

It seems that it could be implemented by making addPath perform the restrict-eval check on the path argument and if it was ok, add it to evalState.allowedPaths at the end.

This would prevent problems like NixOS/nixpkgs#50342

---

Documentation from the Nix manual:

If set to true, the Nix evaluator will not allow access to any files outside of the Nix search path (as set via the NIX_PATH environment variable or the -I option), or to URIs outside of allowed-uri.

[stale]

I marked this as stale due to inactivity. → More info