lix/src
regnat 5985b8b527 Check the CA hash when importing stuff in the local store
When adding a path to the local store (via `LocalStore::addToStore`),
ensure that the `ca` field of the provided `ValidPathInfo` does indeed
correspond to the content of the path.
Otherwise any untrusted user (or any binary cache) can add arbitrary
content-addressed paths to the store (as content-addressed paths don’t
need a signature).
2021-06-01 15:09:24 +02:00
..
build-remote Merge pull request #4477 from NixOS/ca/build-remote 2021-02-26 16:54:44 +01:00
cpptoml Revert the enum struct change 2020-06-18 22:11:26 +00:00
libcmd Split the parsing of an App and its resolving 2021-05-17 17:50:41 +02:00
libexpr Only link with libdl on Linux 2021-06-01 08:05:21 +00:00
libfetchers Add .tar.zst support for TarballInputScheme 2021-05-29 16:03:26 +07:00
libmain restoreSignals() + restoreAffinity() -> restoreProcessContext() 2021-04-07 13:10:02 +02:00
libstore Check the CA hash when importing stuff in the local store 2021-06-01 15:09:24 +02:00
libutil Extract a generic computeClosure function 2021-05-19 11:44:58 +02:00
nix Fix typo in documentation 2021-06-01 00:05:34 -07:00
nix-build restoreSignals() + restoreAffinity() -> restoreProcessContext() 2021-04-07 13:10:02 +02:00
nix-channel Initialize plugins after handling initial command line flags 2021-02-24 08:22:17 -05:00
nix-collect-garbage Initialize plugins after handling initial command line flags 2021-02-24 08:22:17 -05:00
nix-copy-closure Use RealisedPaths in copyPaths 2021-02-25 17:18:48 +01:00
nix-env Rename Buildable 2021-04-05 09:52:25 -04:00
nix-instantiate Initialize plugins after handling initial command line flags 2021-02-24 08:22:17 -05:00
nix-store Rename Buildable 2021-04-05 09:52:25 -04:00
nlohmann Revert "Use upstream nlohmann_json" 2021-04-05 21:24:55 +01:00
resolve-system-dependencies Fix macOS build 2021-01-21 12:46:22 +01:00