* computeStorePathForText: take the references into account when
computing the store path (NIX-77). This is an important security property in multi-user Nix stores. Note that this changes the store paths of derivations (since the derivation aterms are added using addTextToStore), but not most outputs (unless they use builtins.toFile).
This commit is contained in:
		
							parent
							
								
									c558b1583c
								
							
						
					
					
						commit
						b618fa6eb6
					
				
					 5 changed files with 18 additions and 6 deletions
				
			
		|  | @ -215,7 +215,8 @@ std::pair<Path, Hash> computeStorePathForPath(const Path & srcPath, | |||
|    simply yield a different store path, so other users wouldn't be | ||||
|    affected), but it has some backwards compatibility issues (the | ||||
|    hashing scheme changes), so I'm not doing that for now. */ | ||||
| Path computeStorePathForText(const string & suffix, const string & s); | ||||
| Path computeStorePathForText(const string & suffix, const string & s, | ||||
|     const PathSet & references); | ||||
| 
 | ||||
| 
 | ||||
| /* Remove the temporary roots file for this process.  Any temporary
 | ||||
|  |  | |||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue