depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2006-12-04	* Refactoring.	Eelco Dolstra	1	-4/+2

2006-12-02	* Remove SwitchToOriginalUser, we're not going to need it anymore.	Eelco Dolstra	1	-12/+2

2006-12-01	* Merge addToStore and addToStoreFixed.	Eelco Dolstra	1	-2/+2
	* addToStore now adds unconditionally, it doesn't use readOnlyMode. Read-only operation is up to the caller (who can call computeStorePathForPath).
2006-12-01	* More operations.	Eelco Dolstra	1	-1/+39
	* addToStore() and friends: don't do a round-trip to the worker if we're only interested in the path (i.e., in read-only mode).
2006-11-30	* More remote operations.	Eelco Dolstra	1	-0/+6
	* Added new operation hasSubstitutes(), which is more efficient than querySubstitutes().size() > 0.
2006-11-30	* When NIX_REMOTE is set to "slave", fork off nix-worker in slave	Eelco Dolstra	1	-0/+1
	mode. Presumably nix-worker would be setuid to the Nix store user. The worker performs all operations on the Nix store and database, so the caller can be completely unprivileged. This is already much more secure than the old setuid scheme, since the worker doesn't need to do Nix expression evaluation and so on. Most importantly, this means that it doesn't need to access any user files, with all resulting security risks; it only performs pure store operations. Once this works, it is easy to move to a daemon model that forks off a worker for connections established through a Unix domain socket. That would be even more secure.
2006-11-30	* Skeleton of remote store implementation.	Eelco Dolstra	1	-1/+8

2006-11-30	* Refactoring. There is now an abstract interface class StoreAPI	Eelco Dolstra	1	-0/+107
	containing functions that operate on the Nix store. One implementation is LocalStore, which operates on the Nix store directly. The next step, to enable secure multi-user Nix, is to create a different implementation RemoteStore that talks to a privileged daemon process that uses LocalStore to perform the actual operations.