release-lib: add exception to build olm on hydra

Olm was marked as vulnerable in e4767b47.

The issue, however, is controversial and the practical ability to
exploit its vulnerabilities has not been demostrated: ultimately the
users are invited to decide for themselves.

Given that, hydra should still build and distribute the packages
depending on olm to avoid expensive builds in the event the users
decide it's acceptable to continue using these packages.
This commit is contained in:
rnhmjoj 2024-09-14 21:13:06 +02:00
parent 7996a7cf4a
commit 12b1a23c6e
No known key found for this signature in database
GPG Key ID: BFBAF4C975F76450

View File

@ -31,6 +31,11 @@
, nixpkgsArgs ? { config = { , nixpkgsArgs ? { config = {
allowUnfree = false; allowUnfree = false;
inHydra = true; inHydra = true;
# Exceptional unsafe packages that we still build and distribute,
# so users choosing to allow don't have to rebuild them every time.
permittedInsecurePackages = [
"olm-3.2.16" # see PR #347899
];
}; } }; }
# This flag, if set to true, will inhibit the use of `mapTestOn` # This flag, if set to true, will inhibit the use of `mapTestOn`