1
0
Fork 0
mirror of https://github.com/NixOS/nix synced 2025-06-25 06:31:14 +02:00
nix/misc/systemd
eldritch horrors 88b7db1ba4 libstore: Don't default build-dir to temp-dir, store setting
If a build directory is accessible to other users it is possible to
smuggle data in and out of build directories. Usually this is only
a build purity problem, but in combination with other issues it can
be used to break out of a build sandbox. to prevent this we default
to using a subdirectory of nixStateDir (which is more restrictive).

(cherry picked from pennae Lix commit 55b416f6897fb0d8a9315a530a9b7f0914458ded)
(store setting done by roberth)
2025-06-22 16:49:44 +02:00
..
meson.build fixup: use the real bindir for systemd unit's bindir 2024-09-03 13:34:37 -07:00
nix-daemon.conf.in libstore: Don't default build-dir to temp-dir, store setting 2025-06-22 16:49:44 +02:00
nix-daemon.service.in Enable cgroups delegation for systemd 2024-09-03 19:07:18 +00:00
nix-daemon.socket.in Install systemd units 2014-04-07 11:50:55 +02:00