Files
lix/tests/functional
eldritch horrorsandRaito Bezarius 749afbbe99 libstore: don't default build-dir to temp-dir
if a build directory is accessible to other users it is possible to
smuggle data in and out of build directories. usually this ins only
a build purity problem, but in combination with other issues it can
be used to break out of a build sandbox. to prevent this we default
to using a subdirectory of nixStateDir (which is more restrictive).

Fixes CVE-2025-52991.

Change-Id: Iacfc9b50534de158618c815f9fb99d7dae1be4d0
2025-06-24 10:49:49 +00:00
..
2025-03-07 07:45:08 -05:00
2024-10-05 16:21:19 +00:00
2023-12-01 12:06:43 -05:00
2025-05-29 15:25:12 +02:00
2025-05-29 15:25:12 +02:00
2024-03-29 22:57:40 -07:00
2024-03-29 22:57:40 -07:00
2024-05-06 18:56:40 +02:00
2024-03-29 22:57:40 -07:00
2025-05-20 13:27:04 +02:00
2024-03-29 22:57:40 -07:00
2025-05-20 13:27:04 +02:00
2025-03-07 07:45:08 -05:00
2024-03-29 22:57:40 -07:00
2024-08-17 15:48:10 +00:00
2024-05-28 04:20:00 +00:00