Eelco Dolstra c1631b0a39 [security] builtin:fetchurl: Enable TLS verification ... This is better for privacy and to avoid leaking netrc credentials in a MITM attack, but also the assumption that we check the hash no longer holds in some cases (in particular for impure derivations). Partially reverts 5db358d4d7. (cherry picked from commit c04bc17a5a0fdcb725a11ef6541f94730112e7b6) (cherry picked from commit f2f47fa725fc87bfb536de171a2ea81f2789c9fb) (cherry picked from commit 7b39cd631e0d3c3d238015c6f450c59bbc9cbc5b) Upstream-PR: https://github.com/NixOS/nix/pull/11585 Change-Id: Ia973420f6098113da05a594d48394ce1fe41fbb9		2024-09-25 18:40:58 -07:00
..
ca-fd-leak	Copy the output of fixed-output derivations before registering them	2024-03-07 01:44:58 +00:00
containers	Re-enable systemd-nspawn test	2023-09-20 17:03:47 +00:00
coredumps	Allow enabling core dumps from builds for nix & child processes	2024-05-16 17:11:21 -07:00
fetch-git	treewide: Stop using URL literals	2024-08-17 15:48:10 +00:00
io_uring	libstore/build: block io_uring	2024-07-25 18:24:45 +02:00
no-new-privileges	libstore/build: always enable seccomp filtering and no-new-privileges	2024-05-24 21:19:29 +00:00
setuid	libstore/build: use an allowlist approach to syscall filtering	2024-07-25 18:24:40 +02:00
authorization.nix	Allow to sign path as unprivileged user	2023-06-27 18:31:31 +02:00
broken-userns.nix	Fix /etc/group having desynced IDs from the actual UID in the sandbox	2024-05-04 17:36:50 -07:00
default.nix	[security] builtin:fetchurl: Enable TLS verification	2024-09-25 18:40:58 -07:00
fetchurl.nix	[security] builtin:fetchurl: Enable TLS verification	2024-09-25 18:40:58 -07:00
github-flakes.nix	Deprecate the online flake registries and vendor the default registry	2024-05-18 12:27:23 +10:00
nix-copy-closure.nix	make the multi-node vm tests a bit more reliable	2024-03-10 10:10:52 +01:00
nix-copy.nix	tests/nixos/nix-copy: fix NixOS >= 24.05 compatibility	2024-06-08 17:59:08 +02:00
nix-upgrade-nix.nix	nix3-upgrade-nix: always use the /new/ nix-env to perform the installation	2024-07-15 15:26:53 -06:00
nss-preload.nix	Merge pull request #9631 from cole-h/fixup-check-warnings	2024-03-07 09:58:15 +01:00
remote-builds-ssh-ng.nix	ssh-ng: Set log-fd for ssh to 4 by default	2024-04-26 19:04:06 +02:00
remote-builds.nix	make the multi-node vm tests a bit more reliable	2024-03-10 10:10:52 +01:00
sourcehut-flakes.nix	tests: unhaunt the flakes nixos tests	2024-04-18 20:09:19 +00:00
symlink-resolvconf.nix	libstore/build: set NO_NEW_PRIVS for the sandbox	2024-04-15 10:25:29 +03:00
tarball-flakes.nix	Reapply "libfetchers: make attribute / URL query handling consistent"	2024-08-01 15:41:30 -07:00
util.nix	Allow enabling core dumps from builds for nix & child processes	2024-05-16 17:11:21 -07:00