Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
base: cd7db0693519
Choose a base ref
...
head repository: NixOS/nixpkgs
compare: 9630d5c07fbd
Choose a head ref
  • 1 commit
  • 1 file changed
  • 1 contributor

Commits on Sep 28, 2020

  1. nixos/security/wrapper: ensure the tmpfs is not world writeable 

    The /run/wrapper directory is a tmpfs. Unfortunately, it's mounted with
its root directory has the standard (for tmpfs) mode: 1777 (world writeable,
sticky -- the standard mode of shared temporary directories). This means that
every user can create new files and subdirectories there, but can't
move/delete/rename files that belong to other users.
    @andir
    andir committed Sep 28, 2020
    Copy the full SHA
    9630d5c View commit details
    Browse the repository at this point in the history