lix/tests
alois31 f047e4357b libstore/build: always enable seccomp filtering and no-new-privileges
Seccomp filtering and the no-new-privileges functionality improve the security
of the sandbox, and have been enabled by default for a long time. In
#265 it was decided that they
should be enabled unconditionally. Accordingly, remove the allow-new-privileges
(which had weird behavior anyway) and filter-syscall settings, and force the
security features on. Syscall filtering can still be enabled at build time to
support building on architectures libseccomp doesn't support.

Change-Id: Iedbfa18d720ae557dee07a24f69b2520f30119cb
2024-05-24 21:19:29 +00:00
..
functional Deprecate the online flake registries and vendor the default registry 2024-05-18 12:27:23 +10:00
installer test: Make the installer work on old rhel versions 2023-03-31 15:29:50 +02:00
nixos libstore/build: always enable seccomp filtering and no-new-privileges 2024-05-24 21:19:29 +00:00
unit Merge changes I462a8cf0,I3b0bcea3,I2acd56e7,Ifc149764,I9e2ef170 into main 2024-05-23 23:28:42 +00:00