Find a file
Félix Baylac-Jacqué 9e0f5f803f
Daemon: warn when an untrusted user cannot override a setting
In a daemon-based Nix setup, some options cannot be overridden by a
client unless the client's user is considered trusted.

Currently, if an untrusted user tries to override one of those
options, we are silently ignoring it.

This can be pretty confusing in certain situations.

e.g. a user thinks he disabled the sandbox when in reality he did not.

We are now sending a warning message letting know the user some options
have been ignored.

Related to #1761.
2019-06-15 03:59:12 -04:00
.github Add .github/FUNDING.yml 2019-05-31 22:19:46 -04:00
config update config/config.{sub,guess} 2018-08-13 20:00:17 +00:00
corepkgs Support SRI hashes 2018-12-13 14:30:52 +01:00
doc/manual Minor typo 2019-06-04 14:12:03 +02:00
maintainers Fix release script 2019-04-15 19:17:17 +02:00
misc nix-daemon: add variable to disable fork safety 2019-02-09 20:35:30 +01:00
mk Support --disable-shared flag. 2019-02-13 00:03:10 -05:00
perl perl/configure.ac: fix for new version location too 2019-03-25 09:18:30 +01:00
scripts Replace type with command -v in install script 2019-05-29 10:08:21 -04:00
src Daemon: warn when an untrusted user cannot override a setting 2019-06-15 03:59:12 -04:00
tests Fix segfault in builtin fetchurl with hashed mirrors + SRI hashes 2019-06-01 15:27:43 +02:00
.dir-locals.el Add .dir-locals.el for Emacs 2016-01-28 11:12:04 +01:00
.editorconfig Add .editorconfig 2017-06-05 22:57:28 +01:00
.gitignore Treat plain derivation paths in context as normal paths. 2019-01-13 11:29:55 -05:00
.travis.yml Test the installer 2017-07-14 12:11:04 -04:00
.version version -> .version, avoid conflict with C++20 <version> 2019-03-25 09:18:30 +01:00
bootstrap.sh bootstrap: Simplify & make more robust. 2011-09-06 12:11:05 +00:00
configure.ac configure.ac: update for new version file location 2019-03-25 09:18:30 +01:00
COPYING * Change this to LGPL to keep the government happy. 2006-04-25 16:41:06 +00:00
local.mk Merge all nix-* binaries into nix 2018-10-26 12:54:00 +02:00
Makefile Merge all nix-* binaries into nix 2018-10-26 12:54:00 +02:00
Makefile.config.in Support --disable-shared flag. 2019-02-13 00:03:10 -05:00
nix.spec.in Attempt to fix the RPM build 2018-07-31 14:03:19 +02:00
README.md Fix minor grammatical nitpick ("it's" vs. "its") in README.md. 2017-03-22 10:11:23 -04:00
release-common.nix release-common: fix build with config.allowAliases = false 2019-05-30 18:08:33 +03:00
release.nix fetchGit -> fetchTarball 2019-05-17 22:28:03 +02:00
shell.nix fetchGit -> fetchTarball 2019-05-17 22:28:03 +02:00

Nix, the purely functional package manager

Nix is a new take on package management that is fairly unique. Because of its purity aspects, a lot of issues found in traditional package managers don't appear with Nix.

To find out more about the tool, usage and installation instructions, please read the manual, which is available on the Nix website at http://nixos.org/nix/manual.

Contributing

Take a look at the Hacking Section of the manual. It helps you to get started with building Nix from source.

License

Nix is released under the LGPL v2.1

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit.