Skip to content
Snippets Groups Projects
  1. Oct 20, 2005
  2. Oct 05, 2005
  3. Sep 15, 2005
  4. Feb 17, 2005
  5. Feb 01, 2005
  6. Jan 31, 2005
  7. Dec 16, 2004
  8. Oct 25, 2004
  9. Oct 20, 2004
  10. Aug 20, 2004
    • Eelco Dolstra's avatar
      * Setuid support for sharing a Nix installation between multiple · 2d35116c
      Eelco Dolstra authored
        users.
      
        If the configure flag `--enable-setuid' is used, the Nix programs
        nix-env, nix-store, etc. are installed with the setuid bit turned on
        so that they are executed as the user and group specified by
        `--with-nix-user=USER' and `--with-nix-group=GROUP', respectively
        (with defaults `nix' and `nix').
      
        The setuid programs drop all special privileges if they are executed
        by a user who is not a member of the Nix group.
      
        The setuid feature is a quick hack to enable sharing of a Nix
        installation between users who trust each other.  It is not
        generally secure, since any user in the Nix group can modify (by
        building an appropriate derivation) any object in the store, and for
        instance inject trojans into binaries used by other users.
      
        The setuid programs are owned by root, not the Nix user.  This is
        because on Unix normal users cannot change the real uid, only the
        effective uid.  Many programs don't work properly when the real uid
        differs from the effective uid.  For instance, Perl will turn on
        taint mode.  However, the setuid programs drop all root privileges
        immediately, changing all uids and gids to the Nix user and group.
      
      2d35116c
  11. Jul 30, 2004
  12. Jun 04, 2004
  13. May 04, 2004
  14. Apr 22, 2004
  15. Apr 21, 2004
  16. Feb 16, 2004
  17. Jan 22, 2004
  18. Jan 02, 2004
  19. Dec 30, 2003
  20. Oct 20, 2003
  21. Sep 11, 2003
  22. Aug 12, 2003
  23. Jul 23, 2003
  24. Jul 10, 2003
  25. Apr 09, 2003
    • Eelco Dolstra's avatar
      * We no longer use nix-populate standalone, rather we use it as a · aa8fda4b
      Eelco Dolstra authored
        build action for `system' packages (like system.fix) that have
        dependencies on all packages we want to activate.
      
        So the command sequence to switch to a new activation configuration
        of the system would be:
      
          $ fix -i .../fixdescriptors/system.fix
          ...
          system.fix -> 89cf4713b37cc66989304abeb9ea189f
      
          $ nix-switch 89cf4713b37cc66989304abeb9ea189f
      
      * A nix-profile.sh script that can be included in .bashrc.
      aa8fda4b
  26. Apr 04, 2003
Loading