max/nix-super
1
0
Fork 0
mirror of https://github.com/privatevoid-net/nix-super.git synced 2024-11-25 07:16:17 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions
nix-super/doc/manual/rl-next/harden-user-sandboxing.md
Robert Hensing 8a7e31362a rl-next: Add credit
2024-07-25 05:57:06 +02:00

746 B
Raw Blame History

synopsis significance issues
Harden the user sandboxing significant

The build directory has been hardened against interference with the outside world by nesting it inside another directory owned by (and only readable by) the daemon user.

This is a low severity security fix, CVE-2024-38531, that was handled through the GitHub Security Advisories interface, and hence was merged directly in commit 2dd7f8f42 instead of a PR.

Credit: @alois31, Linus Heckemann (@lheckemann) Co-authors: @edolstra