mirror of
https://github.com/privatevoid-net/nix-super.git
synced 2024-11-30 01:26:15 +02:00
32e67eba8b
There is no PR for this, since it was an embargoed fix before disclosure.
250 B
250 B
synopsis | significance | issues |
---|---|---|
Harden the user sandboxing | significant |
The build directory has been hardened against interference with the outside world by nesting it inside another directory owned by (and only readable by) the daemon user.