mirror of
https://github.com/NixOS/nix.git
synced 2024-11-27 17:22:29 +00:00
Chown files created for passAsFile
Nixpkgs' writeTextAsFile does this: mv "$textPath" "$n" Since $textPath was owned by root, if $textPath is on the same filesystem as $n, $n will be owned as root. As a result, the build result was rejected as having suspicious ownership. http://hydra.nixos.org/build/22836807
This commit is contained in:
parent
94378910fb
commit
07d7e7df84
@ -1655,6 +1655,7 @@ void DerivationGoal::startBuilder()
|
||||
environments, except those listed in the passAsFile
|
||||
attribute. Those are passed as file names pointing to
|
||||
temporary files containing the contents. */
|
||||
PathSet filesToChown;
|
||||
StringSet passAsFile = tokenizeString<StringSet>(get(drv.env, "passAsFile"));
|
||||
int fileNr = 0;
|
||||
for (auto & i : drv.env) {
|
||||
@ -1663,6 +1664,7 @@ void DerivationGoal::startBuilder()
|
||||
} else {
|
||||
Path p = tmpDir + "/.attr-" + int2String(fileNr++);
|
||||
writeFile(p, i.second);
|
||||
filesToChown.insert(p);
|
||||
env[i.first + "Path"] = p;
|
||||
}
|
||||
}
|
||||
@ -1759,8 +1761,11 @@ void DerivationGoal::startBuilder()
|
||||
buildUser.kill();
|
||||
|
||||
/* Change ownership of the temporary build directory. */
|
||||
if (chown(tmpDir.c_str(), buildUser.getUID(), buildUser.getGID()) == -1)
|
||||
throw SysError(format("cannot change ownership of ‘%1%’") % tmpDir);
|
||||
filesToChown.insert(tmpDir);
|
||||
|
||||
for (auto & p : filesToChown)
|
||||
if (chown(p.c_str(), buildUser.getUID(), buildUser.getGID()) == -1)
|
||||
throw SysError(format("cannot change ownership of ‘%1%’") % p);
|
||||
}
|
||||
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user