-
-
Notifications
You must be signed in to change notification settings - Fork 12.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
vulkan-loader: fix search paths in suid processes #23003
Conversation
@Ralith, thanks for your PR! By analyzing the history of the files in this pull request, we identified @expipiplus1, @corngood and @lummax to be potential reviewers. |
I am attempting to get the added patch upstreamed, so hopefully it will be unnecessary soon. |
This will break nix-built packages that use Vulkan and run on non-NixOS in situations where the XDG vars are unset of unavailable for security reasons. This is a corner case of a corner case that we already don't support very well, so IMO it shouldn't block, but if anyone knows an easy way to omit the second element of cmakeFlags on non-NixOS, that would be an improvement. |
There are still standard well-known paths like |
This change specifically disables the fallback search of |
I was under the impression that you don't remove |
|
Oh, isn't one of those pointed at |
Yeah, already. Seems my memory is flaky from my old Can't we just set fallback to |
Good idea! Done. I'd be happier with a conditional but this is easy and works. |
Tested on a local system, verified that it works in absence of |
The patch introduced in this PR has been upstreamed; the next release of vulkan-loader will no longer require either patch currently in use. |
Motivation for this change
Fixes #22990
Things done
(nix.useSandbox on NixOS,
or option
build-use-sandbox
innix.conf
on non-NixOS)
nix-shell -p nox --run "nox-review wip"
./result/bin/
)