eldritch horrorsandRaito Bezarius 469cb4218d libstore: don't default build-dir to temp-dir ...

if a build directory is accessible to other users it is possible to
smuggle data in and out of build directories. usually this ins only
a build purity problem, but in combination with other issues it can
be used to break out of a build sandbox. to prevent this we default
to using a subdirectory of nixStateDir (which is more restrictive).

Fixes CVE-2025-52991.

Change-Id: Iacfc9b50534de158618c815f9fb99d7dae1be4d0

2025-06-24 10:50:03 +00:00

..

meson.build

meson: install systemd files

2024-03-29 20:10:33 +00:00

nix-daemon.conf.in

libstore: don't default build-dir to temp-dir

2025-06-24 10:50:03 +00:00

nix-daemon.service.in

Fixup a bunch of references to nixos.org manuals

2024-07-18 19:27:33 +00:00

nix-daemon.socket.in

Install systemd units

2014-04-07 11:50:55 +02:00