Only allow reference lock files when allow-dirty is set

2023-03-19 14:12:49 +01:00 · 2023-03-19 14:12:49 +01:00 · f1c9d83697
parent ea207a2eed
commit f1c9d83697
1 changed files with 3 additions and 0 deletions
--- a/src/libexpr/flake/flake.cc
+++ b/src/libexpr/flake/flake.cc
@ -334,6 +334,9 @@ LockedFlake lockFlake(
    }

    try {
+        if (!fetchSettings.allowDirty && lockFlags.referenceLockFilePath) {
+            throw Error("reference lock file was provided, but the `allow-dirty` setting is set to false");
+        }

        // FIXME: symlink attack
        auto oldLockFile = LockFile::read(