Nikodem Rabuliński nrabulinski
  • Joined on 2024-04-11
nrabulinski created repository nrabulinski/attic 2024-05-01 08:36:11 +00:00
nrabulinski commented on issue lix-project/lix#242 2024-04-20 21:39:51 +00:00
Lix allows configuration which makes everyone inside the sandbox effectively root

It shouldn't since the worst offender here is "if build-users-group is set to empty, default to running user's group" which is a bad default. And as a bonus disallowing it to be root since…

nrabulinski commented on issue lix-project/lix#242 2024-04-19 21:21:22 +00:00
Lix allows configuration which makes everyone inside the sandbox effectively root

@jade wants to kill NixOS CTF challenges this is so sad (jk next year we'll have a Nix 0day dw)

nrabulinski opened issue lix-project/lix#242 2024-04-19 20:07:22 +00:00
Lix allows configuration which makes everyone inside the sandbox effectively root