mirror of
https://github.com/privatevoid-net/nix-super.git
synced 2024-11-15 02:36:16 +02:00
/homeless-shelter -> /proc/homeless/shelter
This makes it so even root can't create $HOME, for example by running `mkdir -p $HOME/.cache/foo`.
This commit is contained in:
parent
ea1f87ecda
commit
77d84a8d8b
2 changed files with 2 additions and 2 deletions
|
@ -264,7 +264,7 @@ The [`builder`](#attr-builder) is executed as follows:
|
|||
- `PATH` is set to `/path-not-set` to prevent shells from
|
||||
initialising it to their built-in default value.
|
||||
|
||||
- `HOME` is set to `/homeless-shelter` to prevent programs from
|
||||
- `HOME` is set to `/proc/homeless-shelter` to prevent programs from
|
||||
using `/etc/passwd` or the like to find the user's home
|
||||
directory, which could cause impurity. Usually, when `HOME` is
|
||||
set, it is used as the location of the home directory, even if
|
||||
|
|
|
@ -102,7 +102,7 @@ void handleDiffHook(
|
|||
}
|
||||
}
|
||||
|
||||
const Path LocalDerivationGoal::homeDir = "/homeless-shelter";
|
||||
const Path LocalDerivationGoal::homeDir = "/proc/homeless-shelter";
|
||||
|
||||
|
||||
LocalDerivationGoal::~LocalDerivationGoal()
|
||||
|
|
Loading…
Reference in a new issue