Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-03-02 | * When using the included sqlite/aterm libraries, build with | Eelco Dolstra | 1 | -3/+2 | |
--enable-shared. * In libutil/libstore/libexpr etc., link against sqlite and aterm. * Some more header file hygiene. | |||||
2007-04-16 | * Remove a warning. | Eelco Dolstra | 1 | -1/+1 | |
2007-03-30 | * Work around a bug in Apple's GCC preprocessor. | Eelco Dolstra | 1 | -1/+2 | |
2007-02-06 | * Fix 64-bit compiler warnings. | Eelco Dolstra | 1 | -2/+2 | |
2007-01-24 | * Nasty: Glibc clears the TMPDIR environment variable in setuid | Eelco Dolstra | 1 | -1/+8 | |
programs, so if a builder uses TMPDIR, then it will fail when executed through nix-setuid-helper. In fact Glibc clears a whole bunch of variables (see sysdeps/generic/unsecvars.h in the Glibc sources), but only TMPDIR should matter in practice. As a workaround, we reinitialise TMPDIR from NIX_BUILD_TOP. | |||||
2006-12-07 | * Rename all those main.cc files. | Eelco Dolstra | 2 | -1/+1 | |
2006-12-07 | * Check for lchown. | Eelco Dolstra | 1 | -0/+7 | |
2006-12-07 | * Move setuidCleanup() to libutil. | Eelco Dolstra | 1 | -2/+3 | |
2006-12-07 | * If not running as root, let the setuid helper kill the build user's | Eelco Dolstra | 1 | -4/+33 | |
processes before and after the build. | |||||
2006-12-07 | * Change the ownership of store paths to the Nix account before | Eelco Dolstra | 1 | -33/+47 | |
deleting them using the setuid helper. | |||||
2006-12-07 | * If Nix is not running as root, call the setuid helper to start the | Eelco Dolstra | 1 | -5/+4 | |
builder under the desired build user. | |||||
2006-12-06 | * Change the ownership of the current directory to the build user. | Eelco Dolstra | 1 | -3/+16 | |
2006-12-06 | * Verify that the desired target user is in the build users group (as | Eelco Dolstra | 1 | -10/+43 | |
specified in the setuid config file). | |||||
2006-12-06 | * Check that the caller is allowed to call the setuid helper. The | Eelco Dolstra | 1 | -12/+49 | |
allowed uid is specified in a configuration file in /etc/nix-setuid.conf. | |||||
2006-12-06 | * Get rid of `build-users'. We'll just take all the members of | Eelco Dolstra | 1 | -3/+7 | |
`build-users-group'. This makes configuration easier: you can just add users in /etc/group. | |||||
2006-12-06 | * nix-setuid-helper: allow running programs under a different uid. | Eelco Dolstra | 1 | -0/+116 | |
2006-12-06 | * Start of the setuid helper (the program that performs the operations | Eelco Dolstra | 2 | -0/+11 | |
that have to be done as root: running builders under different uids, changing ownership of build results, and deleting paths in the store with the wrong ownership). |