-
-
Notifications
You must be signed in to change notification settings - Fork 15.5k
Fix various setuid/setgid permissions fallout #26628
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
27ec1b8
to
98b2e48
Compare
f691a67
to
ae147e3
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Seems OK. Also, there's basically no rebuild impact.
preConfigure = '' | ||
sed -e 's/getline/my_getline/' -i score.c | ||
chmod a+rw config.h | ||
cat >>config.h <<EOF | ||
#define HERE "@nixos-packaged" | ||
#define WWW 0 | ||
#define OWNER "'$(whoami)'" | ||
#define OWNER "$(whoami)" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Running whoami
isn't a good idea at all, is it's an attempt for non-determinism.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
OMG, the build script checks if the user exist. I'll just leave it; it's just a game...
Oh, the remarks.... these aren't sticky bits – sticky are odd numbers in the fourth-from-right digit in octal format. |
(cherry picked from commit d88c0cf) There were just a couple of conflicts, apparently someone has already fixed rewritefs and cron on 17.03. I re-checked that all those do build now (with a new-enough nix daemon).
I'll leave them even if they're wrong, as there's too much of other stuff to do... |
(cherry picked from commit d88c0cf) There were just a couple of conflicts, apparently someone has already fixed rewritefs and cron on 17.03. I re-checked that all those do build now (with a new-enough nix daemon).
Motivation for this change
Fixes all packages explicitly listed as failing in #26600.
Things done
(nix.useSandbox on NixOS,
or option
build-use-sandbox
innix.conf
on non-NixOS)
nix-shell -p nox --run "nox-review wip"
./result/bin/
)