Raito Bezarius f85c84db37 libstore/build: automatic clean up of unsuccessfully built scratch outputs ...

When a build fails, its scratch output paths are not cleaned up.

Until recently, this was deemed not a problem but as part of the effort
to harden the Nix builds and protect these paths against being part of a
staged attack (race conditions, etc.), we automatically cleanup after
failed builds.

Fixes CVE-2025-52992.

Change-Id: I58481b1cc83826298b9d80d37fecf81f117ccb09
Signed-off-by: Raito Bezarius <raito@lix.systems>

2025-06-24 10:50:03 +00:00

..

rl-next

libstore/build: automatic clean up of unsuccessfully built scratch outputs

2025-06-24 10:50:03 +00:00

src

release: release notes for 2.93.0

2025-05-09 14:47:55 -07:00

theme

Add pre-commit checks

2024-03-29 22:57:40 -07:00

anchors.jq

Add pre-commit checks

2024-03-29 22:57:40 -07:00

book.toml

manual: link directly to gerrit for proposing changes

2025-04-01 20:28:06 -07:00

change-authors.yml

Merge "libstore: Show illegal path references in fixed-outputs derivations" into main

2025-05-08 20:19:15 +00:00

custom.css

disallow selecting shell prompt in code samples

2022-12-05 11:01:46 +01:00

generate-deps.py

docs: redo content generation for mdbook and manual

2024-04-11 13:32:06 +00:00

generate-manpage.nix

doc: remove utils.nix

2024-11-29 13:29:31 +00:00

json-to-tree.py

docs: generalize manpage generation script as json-to-tree.py

2024-04-10 15:04:34 +02:00

meson.build

build: set XDG_CONFIG_HOME to /dummy too

2025-04-22 16:45:44 +00:00

process-includes.sh

change shebangs of all .sh scripts to bash

2024-06-24 14:00:43 -07:00

quote-literals.xsl

Generate release notes again

2014-03-12 14:24:29 +01:00

rclone.conf

doc: add a script to upload the nightly manual manually

2024-05-14 14:28:01 -07:00

redirects.js

manual: fix a syntax error in redirects.js that made it not do anything

2024-08-04 20:41:19 -07:00

render-manpage.sh

change shebangs of all .sh scripts to bash

2024-06-24 14:00:43 -07:00

substitute.py

doc preprocessor: support indent directives

2025-03-25 17:06:53 -07:00