Skip to content
Snippets Groups Projects
  1. Feb 17, 2005
  2. Feb 01, 2005
  3. Jan 31, 2005
  4. Dec 16, 2004
  5. Oct 25, 2004
  6. Oct 20, 2004
  7. Aug 20, 2004
    • Eelco Dolstra's avatar
      * Setuid support for sharing a Nix installation between multiple · 2d35116c
      Eelco Dolstra authored
        users.
      
        If the configure flag `--enable-setuid' is used, the Nix programs
        nix-env, nix-store, etc. are installed with the setuid bit turned on
        so that they are executed as the user and group specified by
        `--with-nix-user=USER' and `--with-nix-group=GROUP', respectively
        (with defaults `nix' and `nix').
      
        The setuid programs drop all special privileges if they are executed
        by a user who is not a member of the Nix group.
      
        The setuid feature is a quick hack to enable sharing of a Nix
        installation between users who trust each other.  It is not
        generally secure, since any user in the Nix group can modify (by
        building an appropriate derivation) any object in the store, and for
        instance inject trojans into binaries used by other users.
      
        The setuid programs are owned by root, not the Nix user.  This is
        because on Unix normal users cannot change the real uid, only the
        effective uid.  Many programs don't work properly when the real uid
        differs from the effective uid.  For instance, Perl will turn on
        taint mode.  However, the setuid programs drop all root privileges
        immediately, changing all uids and gids to the Nix user and group.
      
      2d35116c
  8. Jul 30, 2004
  9. Jun 04, 2004
  10. May 04, 2004
  11. Apr 22, 2004
  12. Apr 21, 2004
  13. Feb 16, 2004
  14. Jan 22, 2004
  15. Jan 02, 2004
  16. Dec 30, 2003
  17. Oct 20, 2003
  18. Sep 11, 2003
  19. Aug 12, 2003
  20. Jul 23, 2003
  21. Jul 10, 2003
  22. Apr 09, 2003
    • Eelco Dolstra's avatar
      * We no longer use nix-populate standalone, rather we use it as a · aa8fda4b
      Eelco Dolstra authored
        build action for `system' packages (like system.fix) that have
        dependencies on all packages we want to activate.
      
        So the command sequence to switch to a new activation configuration
        of the system would be:
      
          $ fix -i .../fixdescriptors/system.fix
          ...
          system.fix -> 89cf4713b37cc66989304abeb9ea189f
      
          $ nix-switch 89cf4713b37cc66989304abeb9ea189f
      
      * A nix-profile.sh script that can be included in .bashrc.
      aa8fda4b
  23. Apr 04, 2003
Loading