max/nix-super
1
0
Fork 0
mirror of https://github.com/privatevoid-net/nix-super.git synced 2025-02-12 13:17:18 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions
nix-super/doc/manual/rl-next/harden-user-sandboxing.md
Théophane Hufschmitt d99c868b04 Add a release note for the build-dir hardening
2024-06-21 17:06:19 +02:00

283 B
Raw Blame History

synopsis significance issues prs
Harden the user sandboxing significant <only provided once merged>

The build directory has been hardened against interference with the outside world by nesting it inside another directory owned by (and only readable by) the daemon user.