mirror of
https://github.com/NixOS/nix
synced 2025-06-28 05:21:16 +02:00
Don't do vfork in conjunction with setuid
This commit is contained in:
parent
0e8fc118b3
commit
851b47bd7d
2 changed files with 5 additions and 0 deletions
|
@ -1914,6 +1914,8 @@ void DerivationGoal::startBuilder()
|
|||
builderOut.create();
|
||||
|
||||
/* Fork a child to build the package. */
|
||||
ProcessOptions options;
|
||||
options.allowVfork = !buildUser.enabled();
|
||||
pid = startProcess([&]() {
|
||||
runChild();
|
||||
});
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue