philiptaron/lix
0
0
Fork 0
forked from lix-project/lix
Code Pull requests Activity
lix/src/libstore
History
Eelco Dolstra eba840c8a1
Linux sandbox: Use /build instead of /tmp as $TMPDIR 
There is a security issue when a build accidentally stores its $TMPDIR
in some critical place, such as an RPATH. If
TMPDIR=/tmp/nix-build-..., then any user on the system can recreate
that directory and inject libraries into the RPATH of programs
executed by other users. Since /build probably doesn't exist (or isn't
world-writable), this mitigates the issue.
2017-05-04 16:57:03 +02:00
..
binary-cache-store.cc Add a dummy Store::buildPaths() method 2017-05-01 13:43:34 +02:00
binary-cache-store.hh Add a dummy Store::buildPaths() method 2017-05-01 13:43:34 +02:00
build.cc Linux sandbox: Use /build instead of /tmp as $TMPDIR 2017-05-04 16:57:03 +02:00
builtins.cc Support netrc in <nix/fetchurl.nix> 2017-02-16 15:51:50 +01:00
builtins.hh Support netrc in <nix/fetchurl.nix> 2017-02-16 15:51:50 +01:00
crypto.cc Convert Settings to the new config system 2017-04-13 20:53:23 +02:00
crypto.hh Revert "Get rid of unicode quotes (#1140)" 2016-11-26 00:38:01 +01:00
derivations.cc Move istringstream_nocopy to a separate file 2017-03-21 14:43:03 +01:00
derivations.hh Add a mechanism for derivation attributes to reference the derivation's outputs 2016-08-17 17:19:32 +02:00
download.cc Reimplement connect-timeout 2017-04-19 14:54:52 +02:00
download.hh Default to 5 download retries 2017-04-10 09:22:24 -04:00
export-import.cc TeeSink: Pre-reserve string space 2017-03-01 16:16:04 +01:00
fs-accessor.hh Add NAR / Store accessor abstraction 2016-02-25 17:43:19 +01:00
gc.cc Remove debug statement 2017-04-24 15:01:28 +02:00
globals.cc Replace $NIX_REMOTE_SYSTEMS with an option "builder-files" 2017-05-02 15:46:09 +02:00
globals.hh Replace $NIX_REMOTE_SYSTEMS with an option "builder-files" 2017-05-02 15:46:09 +02:00
http-binary-cache-store.cc S3BinaryCacheStore: Set Content-Type 2017-03-15 16:50:19 +01:00
legacy-ssh-store.cc build-remote: Fix fallback to other machines when connecting fails 2017-05-02 15:46:09 +02:00
local-binary-cache-store.cc S3BinaryCacheStore: Set Content-Type 2017-03-15 16:50:19 +01:00
local-fs-store.cc LocalStoreAccessor: Fix handling of diverted stores 2017-05-02 15:46:09 +02:00
local-store.cc build-remote: Don't require signatures 2017-05-01 20:03:25 +02:00
local-store.hh Merge branch 'rework-options' of https://github.com/copumpkin/nix 2017-04-13 16:15:51 +02:00
local.mk Detect lsof 2017-04-20 19:11:45 +02:00
machines.cc Replace $NIX_REMOTE_SYSTEMS with an option "builder-files" 2017-05-02 15:46:09 +02:00
machines.hh Replace $NIX_REMOTE_SYSTEMS with an option "builder-files" 2017-05-02 15:46:09 +02:00
misc.cc Revert "Get rid of unicode quotes (#1140)" 2016-11-26 00:38:01 +01:00
nar-accessor.cc Fix warning on 32-bit systems 2016-12-08 20:37:58 +01:00
nar-accessor.hh Add NAR / Store accessor abstraction 2016-02-25 17:43:19 +01:00
nar-info-disk-cache.cc NarInfoDiskCache: Handle SQLite busy errors 2017-02-28 13:44:11 +01:00
nar-info-disk-cache.hh HttpBinaryCacheStore: Fix caching of WantMassQuery 2016-06-01 16:24:17 +02:00
nar-info.cc Ignore broken "Deriver: unknown-deriver" fields in .narinfo 2017-03-28 13:08:13 +02:00
nar-info.hh Make the store directory a member variable of Store 2016-06-01 16:24:17 +02:00
nix-store.pc.in Install some pkgconfig files 2014-09-18 12:00:40 +02:00
optimise-store.cc Reduce severity of EMLINK warnings 2017-05-01 14:36:56 +02:00
pathlocks.cc Fix assertion failure when a path is locked 2017-01-26 20:40:33 +01:00
pathlocks.hh openLockFile: Return an AutoCloseFD 2017-01-26 20:40:33 +01:00
profiles.cc Revert "Get rid of unicode quotes (#1140)" 2016-11-26 00:38:01 +01:00
profiles.hh Allow setting the state directory as a store parameter 2016-06-02 16:02:48 +02:00
references.cc Revert "Get rid of unicode quotes (#1140)" 2016-11-26 00:38:01 +01:00
references.hh Use "#pragma once" to prevent repeated header file inclusion 2012-07-18 14:59:03 -04:00
remote-fs-accessor.cc Revert "Get rid of unicode quotes (#1140)" 2016-11-26 00:38:01 +01:00
remote-fs-accessor.hh Factor a general remote FS accessor out of BinaryCacheStore 2016-09-02 14:24:34 -04:00
remote-store.cc build-remote: Fix fallback to other machines when connecting fails 2017-05-02 15:46:09 +02:00
remote-store.hh build-remote: Fix fallback to other machines when connecting fails 2017-05-02 15:46:09 +02:00
s3-binary-cache-store.cc Add a Config class to simplify adding configuration settings 2017-04-13 16:03:31 +02:00
s3-binary-cache-store.hh Fix getS3Stats() 2016-10-06 17:00:52 +02:00
s3.hh Add aws-region param to S3 store URLs 2017-03-03 16:12:17 -05:00
sandbox-defaults.sb.in Revert "remove sandbox-defaults.sb" 2015-11-21 16:40:24 -05:00
schema.sql Mark content-addressed paths in the Nix database and in .narinfo 2016-08-10 18:05:35 +02:00
serve-protocol.hh Provide default implementations for a couple of Store methods 2017-02-07 19:29:21 +01:00
sqlite.cc Improve SQLite busy handling 2017-02-28 13:59:11 +01:00
sqlite.hh Improve SQLite busy handling 2017-02-28 13:59:11 +01:00
ssh-store.cc Add a Config class to simplify adding configuration settings 2017-04-13 16:03:31 +02:00
ssh.cc build-remote: Ugly hackery to get build logs to work 2017-05-02 12:02:23 +02:00
ssh.hh build-remote: Ugly hackery to get build logs to work 2017-05-02 12:02:23 +02:00
store-api.cc build-remote: Don't require signatures 2017-05-01 20:03:25 +02:00
store-api.hh build-remote: Fix fallback to other machines when connecting fails 2017-05-02 15:46:09 +02:00
worker-protocol.hh Implement RemoteStore::queryMissing() 2017-04-06 18:40:19 +02:00