diff options
Diffstat (limited to 'doc/manual/release-notes')
| -rw-r--r-- | doc/manual/release-notes/rl-1.11.10.xml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/manual/release-notes/rl-1.11.10.xml b/doc/manual/release-notes/rl-1.11.10.xml index 13cb497d921c..415388b3e2d1 100644 --- a/doc/manual/release-notes/rl-1.11.10.xml +++ b/doc/manual/release-notes/rl-1.11.10.xml @@ -19,7 +19,7 @@ filter. Note that this imposes a small performance penalty (e.g. 1% when building GNU Hello). Using seccomp, we now also prevent the creation of extended attributes and POSIX ACLs since these cannot be represented in the NAR format and (in the case of POSIX ACLs) allow -bypassing regular Nix store permissions. On OS X, the restriction is +bypassing regular Nix store permissions. On macOS, the restriction is implemented using the existing sandbox mechanism, which now uses a minimal “allow all except the creation of setuid/setgid binaries” profile when regular sandboxing is disabled. On other platforms, the |