me
/
guix
Archived
1
0
Fork 0
Code

daemon: Always require a signature when importing an archive. 

* nix/nix-daemon/nix-daemon.cc (performOp): Pass true as the first argument to
  'performOp'.
master
Ludovic Courtès 2015-06-06 18:00:58 +02:00
parent d2aa12250e
commit aa0f8409db
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
nix/nix-daemon/nix-daemon.cc
View File

@ -440,7 +440,10 @@ static void performOp(bool trusted, unsigned int clientVersion,
case wopImportPaths: { case wopImportPaths: {
startWork(); startWork();
TunnelSource source(from); TunnelSource source(from);
Paths paths = store->importPaths(!trusted, source);
/* Unlike Nix, always require a signature, even for "trusted"
users. */
Paths paths = store->importPaths(true, source);
stopWork(); stopWork();
writeStrings(paths, to); writeStrings(paths, to);
break; break;