nrabulinski/lix
0
0
Fork 0
forked from lix-project/lix
Code Pull requests Activity

Update src/libstore/globals.hh

Browse source 
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
This commit is contained in:
Ben Radford 2023-07-12 12:32:57 +01:00 committed by GitHub
parent 41412dc4ae
commit 0309f6b5b8
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/libstore/globals.hh
View file

@ -530,8 +530,8 @@ public:
Nix will attempt to drop supplementary groups when building with sandboxing. Nix will attempt to drop supplementary groups when building with sandboxing.
However this can fail under some circumstances. However this can fail under some circumstances.
For example, if the user lacks the CAP_SETGID capability. For example, if the user lacks the `CAP_SETGID` capability.
Search setgroups(2) for EPERM to find more detailed information on this. Search `setgroups(2)` for `EPERM` to find more detailed information on this.
If you encounter such a failure, setting this option to `false` will let you ignore it and continue. If you encounter such a failure, setting this option to `false` will let you ignore it and continue.
But before doing so, you should consider the security implications carefully. But before doing so, you should consider the security implications carefully.