regnatandEelco Dolstra 5985b8b527 Check the CA hash when importing stuff in the local store ...

When adding a path to the local store (via `LocalStore::addToStore`),
ensure that the `ca` field of the provided `ValidPathInfo` does indeed
correspond to the content of the path.
Otherwise any untrusted user (or any binary cache) can add arbitrary
content-addressed paths to the store (as content-addressed paths don’t
need a signature).

2021-06-01 15:09:24 +02:00

..

build-remote

Merge pull request #4477 from NixOS/ca/build-remote

2021-02-26 16:54:44 +01:00

cpptoml

bump cpptoml to v0.1.1

2019-05-29 17:01:39 +08:00

libcmd

Split the parsing of an App and its resolving

2021-05-17 17:50:41 +02:00

libexpr

Only link with libdl on Linux

2021-06-01 08:05:21 +00:00

libfetchers

Add .tar.zst support for TarballInputScheme

2021-05-29 16:03:26 +07:00

libmain

restoreSignals() + restoreAffinity() -> restoreProcessContext()

2021-04-07 13:10:02 +02:00

libstore

Check the CA hash when importing stuff in the local store

2021-06-01 15:09:24 +02:00

libutil

Extract a generic computeClosure function

2021-05-19 11:44:58 +02:00

nix

Fix typo in documentation

2021-06-01 00:05:34 -07:00

nix-build

restoreSignals() + restoreAffinity() -> restoreProcessContext()

2021-04-07 13:10:02 +02:00

nix-channel

Initialize plugins after handling initial command line flags

2021-02-24 08:22:17 -05:00

nix-collect-garbage

Initialize plugins after handling initial command line flags

2021-02-24 08:22:17 -05:00

nix-copy-closure

Use RealisedPaths in copyPaths

2021-02-25 17:18:48 +01:00

nix-env

Rename Buildable

2021-04-05 09:52:25 -04:00

nix-instantiate

Initialize plugins after handling initial command line flags

2021-02-24 08:22:17 -05:00

nix-store

Rename Buildable

2021-04-05 09:52:25 -04:00

nlohmann

Revert "Use upstream nlohmann_json"

2021-04-05 21:24:55 +01:00

resolve-system-dependencies

Fix macOS build

2021-01-21 12:46:22 +01:00