Use Nix's restricted evaluation mode
This commit is contained in:
parent
5d8a563e90
commit
5a61aefe4f
|
@ -242,6 +242,10 @@ int main(int argc, char * * argv)
|
||||||
return true;
|
return true;
|
||||||
});
|
});
|
||||||
|
|
||||||
|
/* Prevent access to paths outside of the Nix search path and
|
||||||
|
to the environment. */
|
||||||
|
settings.set("restrict-eval", "true");
|
||||||
|
|
||||||
if (releaseExpr == "") throw UsageError("no expression specified");
|
if (releaseExpr == "") throw UsageError("no expression specified");
|
||||||
|
|
||||||
if (gcRootsDir == "") printMsg(lvlError, "warning: `--gc-roots-dir' not specified");
|
if (gcRootsDir == "") printMsg(lvlError, "warning: `--gc-roots-dir' not specified");
|
||||||
|
|
Loading…
Reference in a new issue