mirror of
https://github.com/NixOS/nix
synced 2024-10-18 14:32:45 -04:00
32e67eba8b
There is no PR for this, since it was an embargoed fix before disclosure.
8 lines
250 B
Markdown
8 lines
250 B
Markdown
---
|
|
synopsis: Harden the user sandboxing
|
|
significance: significant
|
|
issues:
|
|
---
|
|
|
|
The build directory has been hardened against interference with the outside world by nesting it inside another directory owned by (and only readable by) the daemon user.
|