Code

Best effort supplementary groups#8342

Code

Merged

thufschmitt merged 20 commits intoNixOS:masterNixOS/nix:masterfrom NixLayeredStore:best-effort-supplementary-groupsNixLayeredStore/nix:best-effort-supplementary-groupsCopy head branch name to clipboardJul 17, 2023

+122-11

Commits

Commits on May 8, 2023

• Create escape hatch for supplementary group sandboxing woes

  Show description for 6d1aa52
  Ericson2314

  committed
  6d1aa52

  Copy full SHA for 6d1aa52

Commits on May 15, 2023

• Update src/libstore/build/local-derivation-goal.cc

  Show description for 2524a21
  

  Ericson2314

  and

  symphorien

  authored
  2524a21

  Copy full SHA for 2524a21

• Merge remote-tracking branch 'upstream/master' into best-effort-supplementary-groups

  Ericson2314

  committed
  746c6aa

  Copy full SHA for 746c6aa

• Add some tests for drop-supplementary-groups

  Ericson2314

  committed
  d8ef0c9

  Copy full SHA for d8ef0c9

• Avoid out links in supplementary groups test

  Show description for 754ced4
  Ericson2314

  committed
  754ced4

  Copy full SHA for 754ced4

Commits on Jul 11, 2023

• Merge remote-tracking branch 'origin/master' into best-effort-supplementary-groups

  benradf

  committed
  25b20b4

  Copy full SHA for 25b20b4

• Always attempt setgroups but allow failure to be ignored.

  benradf

  committed
  07dabcc

  Copy full SHA for 07dabcc

• Update description for require-drop-supplementary-groups.

  benradf

  committed
  0caf28f

  Copy full SHA for 0caf28f

• Be clearer about the security implications.

  benradf

  committed
  2b4c59d

  Copy full SHA for 2b4c59d

• Default should depend on whether we are root.

  benradf

  committed
  a193ec4

  Copy full SHA for a193ec4

• Say a bit about default value in setting description.

  benradf

  committed
  b8e8dfc

  Copy full SHA for b8e8dfc

• Check _NIX_TEST_NO_SANDBOX when setting _canUseSandbox.

  benradf

  committed
  c1d39de

  Copy full SHA for c1d39de

• Skip build-remote-trustless unless sandbox is supported.

  benradf

  committed
  41412dc

  Copy full SHA for 41412dc

Commits on Jul 12, 2023

• Update src/libstore/globals.hh

  Show description for 0309f6b
  

  benradf

  and

  fricklerhandwerk

  authored
  0309f6b

  Copy full SHA for 0309f6b

• Update src/libstore/globals.hh

  Show description for a2acd23
  

  benradf

  and

  fricklerhandwerk

  authored
  a2acd23

  Copy full SHA for a2acd23

Commits on Jul 13, 2023

• Merge remote-tracking branch 'upstream/master' into best-effort-supplementary-groups

  Ericson2314

  committed
  ddc0a20

  Copy full SHA for ddc0a20

• Revert "Check _NIX_TEST_NO_SANDBOX when setting _canUseSandbox."

  Show description for 9e64f24
  Ericson2314

  committed
  9e64f24

  Copy full SHA for 9e64f24

• Revert "Skip build-remote-trustless unless sandbox is supported."

  Show description for 84c4e6f
  Ericson2314

  committed
  84c4e6f

  Copy full SHA for 84c4e6f

• Add comment regarding the unset of NIX_STORE_DIR

  Show description for 1a13757
  cidkidnix

  committed
  1a13757

  Copy full SHA for 1a13757

• move unset NIX_STORE_DIR in supplementary-groups.sh

  Show description for adb28d4
  cidkidnix

  committed
  adb28d4

  Copy full SHA for adb28d4