This repository has been archived on 2024-08-07. You can view files and clone it, but cannot push or open issues/pull-requests.

Ludovic Courtès ec7fb66994 daemon: Prevent privilege escalation with '--keep-failed' [security]. ... Fixes <https://bugs.gnu.org/47229>. Reported by Nathan Nye of WhiteBeam Security. * nix/libstore/build.cc (DerivationGoal::startBuilder): When 'useChroot' is true, add "/top" to 'tmpDir'. (DerivationGoal::deleteTmpDir): Adjust accordingly. When 'settings.keepFailed' is true, chown in two steps: first the "/top" sub-directory, and then rename "/top" to its parent.		2021-03-18 12:18:56 +01:00
..
boost	…
libstore	…
libutil	…
nix-daemon	…
.gitignore	…
AUTHORS	…
COPYING	…
local.mk	…