lix/scripts
Eelco Dolstra 2d35116c13 * Setuid support for sharing a Nix installation between multiple
users.

  If the configure flag `--enable-setuid' is used, the Nix programs
  nix-env, nix-store, etc. are installed with the setuid bit turned on
  so that they are executed as the user and group specified by
  `--with-nix-user=USER' and `--with-nix-group=GROUP', respectively
  (with defaults `nix' and `nix').

  The setuid programs drop all special privileges if they are executed
  by a user who is not a member of the Nix group.

  The setuid feature is a quick hack to enable sharing of a Nix
  installation between users who trust each other.  It is not
  generally secure, since any user in the Nix group can modify (by
  building an appropriate derivation) any object in the store, and for
  instance inject trojans into binaries used by other users.

  The setuid programs are owned by root, not the Nix user.  This is
  because on Unix normal users cannot change the real uid, only the
  effective uid.  Many programs don't work properly when the real uid
  differs from the effective uid.  For instance, Perl will turn on
  taint mode.  However, the setuid programs drop all root privileges
  immediately, changing all uids and gids to the Nix user and group.
2004-08-20 14:49:05 +00:00
..
Makefile.am * A utility script `nix-build' that builds Nix expressions and prints 2004-06-22 15:12:34 +00:00
nix-build.in * Flag `--no-link' suppresses symlinking to the output path. 2004-08-18 12:11:31 +00:00
nix-channel.in * Channels. These allow you to stay current with an evolving set of 2004-04-21 14:54:05 +00:00
nix-collect-garbage.in * Look for GC roots in @localstatedir@/nix/gcroots. 2004-04-22 14:17:57 +00:00
nix-install-package.in * Switched from wget to curl. 2004-04-06 08:18:51 +00:00
nix-prefetch-url.in * Adapted nix-pull to use the new substitute mechanism. 2004-06-21 09:51:23 +00:00
nix-profile.sh.in * Improvements to profiles. Generations are now per-profile, e.g., 2004-02-06 10:30:20 +00:00
nix-pull.in * Adapted nix-pull to use the new substitute mechanism. 2004-06-21 09:51:23 +00:00
nix-push.in * Setuid support for sharing a Nix installation between multiple 2004-08-20 14:49:05 +00:00
prebuilts.conf * Doh! Edited readmanifest.pm' instead of readmanifest.pm.in'. 2004-01-16 14:54:39 +00:00
readmanifest.pm.in * Adapted nix-pull to use the new substitute mechanism. 2004-06-21 09:51:23 +00:00