eldritch horrors 4f0c59b307 libstore: don't default build-dir to temp-dir ...

if a build directory is accessible to other users it is possible to
smuggle data in and out of build directories. usually this ins only
a build purity problem, but in combination with other issues it can
be used to break out of a build sandbox. to prevent this we default
to using a subdirectory of nixStateDir (which is more restrictive).

Change-Id: Iacfc9b50534de158618c815f9fb99d7dae1be4d0

2025-06-23 20:48:56 +00:00

..

meson.build

meson: install systemd files

2024-03-29 20:10:33 +00:00

nix-daemon.conf.in

libstore: don't default build-dir to temp-dir

2025-06-23 20:48:56 +00:00

nix-daemon.service.in

Fixup a bunch of references to nixos.org manuals

2024-07-18 19:27:33 +00:00

nix-daemon.socket.in

Install systemd units

2014-04-07 11:50:55 +02:00