regnat 5985b8b527 Check the CA hash when importing stuff in the local store ... When adding a path to the local store (via `LocalStore::addToStore`), ensure that the `ca` field of the provided `ValidPathInfo` does indeed correspond to the content of the path. Otherwise any untrusted user (or any binary cache) can add arbitrary content-addressed paths to the store (as content-addressed paths don’t need a signature).		2021-06-01 15:09:24 +02:00
..
ca	Add a test for nix run with CA derivations	2021-05-17 15:10:48 +02:00
config
lang	Add .tar.zst support for TarballInputScheme	2021-05-29 16:03:26 +07:00
plugins
add.sh
bad.tar.xz
binary-cache-build-remote.sh
binary-cache.sh
brotli.sh
build-dry.sh
build-hook-ca-fixed.nix
build-hook-ca-floating.nix
build-hook.nix
build-remote-content-addressed-fixed.sh
build-remote-content-addressed-floating.sh
build-remote-input-addressed.sh
build-remote.sh
build.sh	Properly normalize the content-addressed paths	2021-05-05 21:00:08 +02:00
case-hack.sh
case.nar
check-refs.nix
check-refs.sh
check-reqs.nix
check-reqs.sh
check.nix
check.sh
common.sh.in
compute-levels.sh
config.nix.in
config.sh
db-migration.sh
dependencies.builder0.sh
dependencies.nix
dependencies.sh
describe-stores.sh
dump-db.sh
export-graph.nix
export-graph.sh
export.sh
fetchGit.sh
fetchGitRefs.sh
fetchGitSubmodules.sh
fetchMercurial.sh
fetchurl.sh
filter-source.nix
filter-source.sh
fixed.builder1.sh
fixed.builder2.sh
fixed.nix
fixed.sh
flakes.sh
function-trace.sh
gc-auto.sh
gc-concurrent.builder.sh
gc-concurrent.nix
gc-concurrent.sh
gc-concurrent2.builder.sh
gc-runtime.nix
gc-runtime.sh
gc.sh
github-flakes.nix
hash-check.nix
hash.sh
import-derivation.nix
import-derivation.sh
init.sh
install-darwin.sh
lang.sh
linux-sandbox.sh
local-store.sh
local.mk	Check the CA hash when importing stuff in the local store	2021-06-01 15:09:24 +02:00
logging.sh
misc.sh
multiple-outputs.nix
multiple-outputs.sh
nar-access.nix
nar-access.sh
nix-build-examples.nix
nix-build.sh
nix-channel.sh
nix-copy-closure.nix
nix-copy-ssh.sh
nix-profile.sh
nix-shell.sh
optimise-store.sh
parallel.builder.sh
parallel.nix
parallel.sh
pass-as-file.sh
path.nix
placeholders.sh
plugins.sh
post-hook.sh
pure-eval.nix
pure-eval.sh
push-to-store.sh
recursive.sh
referrers.sh
remote-builds.nix
remote-store.sh
repair.sh
restricted.nix
restricted.sh
search.nix
search.sh
secure-drv-outputs.nix
secure-drv-outputs.sh
setuid.nix
shell-hello.nix
shell.nix
shell.sh
shell.shebang.rb
shell.shebang.sh
signing.sh
simple.builder.sh
simple.nix
simple.sh
ssh-relay.sh
structured-attrs.nix
structured-attrs.sh
substitute-with-invalid-ca.sh	Check the CA hash when importing stuff in the local store	2021-06-01 15:09:24 +02:00
tarball.sh
timeout.nix
timeout.sh
user-envs.builder.sh
user-envs.nix
user-envs.sh
zstd.sh	add tests for zstd compression	2021-04-09 23:13:08 +02:00