eldritch horrors 4f0c59b307 libstore: don't default build-dir to temp-dir ...

if a build directory is accessible to other users it is possible to
smuggle data in and out of build directories. usually this ins only
a build purity problem, but in combination with other issues it can
be used to break out of a build sandbox. to prevent this we default
to using a subdirectory of nixStateDir (which is more restrictive).

Change-Id: Iacfc9b50534de158618c815f9fb99d7dae1be4d0

2025-06-23 20:48:56 +00:00

..

internal-api

fix tooling after include reorganization

2024-11-19 22:55:32 +00:00

manual

libstore: don't default build-dir to temp-dir

2025-06-23 20:48:56 +00:00