Raito Bezarius 42e2bd045c libstore/build: automatic clean up of unsuccessfully built scratch outputs ...

When a build fails, its scratch output paths are not cleaned up.

Until recently, this was deemed not a problem but as part of the effort
to harden the Nix builds and protect these paths against being part of a
staged attack (race conditions, etc.), we automatically cleanup after
failed builds.

Fixes CVE-2025-52992.

Change-Id: I58481b1cc83826298b9d80d37fecf81f117ccb09
Signed-off-by: Raito Bezarius <raito@lix.systems>

2025-06-24 10:49:49 +00:00

..

functional

libstore: don't default build-dir to temp-dir

2025-06-24 10:49:49 +00:00

functional2

tests/functional2/lang: require all files to be used

2025-06-20 11:36:13 +02:00

installer

chore: rebrand Nix to Lix when it makes sense

2024-06-01 20:31:24 +02:00

nixos

libstore/build: automatic clean up of unsuccessfully built scratch outputs

2025-06-24 10:49:49 +00:00

unit

libutil: guess or invent a path from file descriptors

2025-06-23 16:57:23 +02:00

repl-completion.nix

Merge pull request #10799 from hercules-ci/safer-tab-completion

2024-06-16 04:03:32 +00:00