diff options
author | Eelco Dolstra <edolstra@gmail.com> | 2019-10-09T16·01+0200 |
---|---|---|
committer | Eelco Dolstra <edolstra@gmail.com> | 2019-10-09T21·57+0200 |
commit | 65953789bcd73f098486b0a385b4e661c0ccda19 (patch) | |
tree | 92a0208f5a4455b89f9549b802dc0f063e64711f /tests/remote-store.sh | |
parent | 910b0fcc118cce3ade09f252da43fbe2436080e5 (diff) |
Remove world-writability from per-user directories
'nix-daemon' now creates subdirectories for users when they first connect. Fixes #509 (CVE-2019-17365). Should also fix #3127. (cherry picked from commit 5a303093dcae1e5ce9212616ef18f2ca51020b0d)
Diffstat (limited to 'tests/remote-store.sh')
-rw-r--r-- | tests/remote-store.sh | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/tests/remote-store.sh b/tests/remote-store.sh index f2f2806d022d..77437658ead6 100644 --- a/tests/remote-store.sh +++ b/tests/remote-store.sh @@ -13,3 +13,7 @@ cmp $TEST_ROOT/d1 $TEST_ROOT/d2 nix-store --gc --max-freed 1K killDaemon + +user=$(whoami) +[ -e $NIX_STATE_DIR/gcroots/per-user/$user ] +[ -e $NIX_STATE_DIR/profiles/per-user/$user ] |