Merge pull request #2975 from matthewbauer/fix-nsswitch-issue

Don’t use entire /etc/nsswitch.conf file
2019-07-13 17:08:02 +02:00
parent 53247d6b11 ec0087df0a
commit 2f853b20df
1 changed files with 7 additions and 1 deletions
@@ -2734,7 +2734,13 @@ void DerivationGoal::runChild()
               on. */
            if (fixedOutput) {
                ss.push_back("/etc/resolv.conf");
-                ss.push_back("/etc/nsswitch.conf");
+
+                // Only use nss functions to resolve hosts and
+                // services. Don’t use it for anything else that may
+                // be configured for this system. This limits the
+                // potential impurities introduced in fixed outputs.
+                writeFile(chrootRootDir + "/etc/nsswitch.conf", "hosts: files dns\nservices: files\n");
+
                ss.push_back("/etc/services");
                ss.push_back("/etc/hosts");
                if (pathExists("/var/run/nscd/socket"))