nordic-dev.net/nix
nordic-dev.net/nix
2
0
Fork 0
mirror of https://github.com/NixOS/nix.git synced 2024-11-25 16:23:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add a release note for the build-dir hardening

Browse Source 
(cherry picked from commit d99c868b04)
This commit is contained in:
Théophane Hufschmitt 2024-04-09 10:48:05 +02:00 committed by Eelco Dolstra
parent 930bb21893
commit a156c597ff
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
doc/manual/rl-next/harden-user-sandboxing.md Normal file
View File

@ -0,0 +1,8 @@
---
synopsis: Harden the user sandboxing
significance: significant
issues:
prs: <only provided once merged>
---
The build directory has been hardened against interference with the outside world by nesting it inside another directory owned by (and only readable by) the daemon user.