maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Don't let unprivileged users repair paths

Browse source
This commit is contained in:
Eelco Dolstra 2015-06-02 02:21:54 +02:00
parent 7106bb0611
commit d8ddf994e7
1 changed files with 9 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/nix-daemon/nix-daemon.cc
View file

@ -523,6 +523,8 @@ static void performOp(bool trusted, unsigned int clientVersion,
bool checkContents = readInt(from) != 0; bool checkContents = readInt(from) != 0;
bool repair = readInt(from) != 0; bool repair = readInt(from) != 0;
startWork(); startWork();
if (repair && !trusted)
throw Error("you are not privileged to repair paths");
bool errors = store->verifyStore(checkContents, repair); bool errors = store->verifyStore(checkContents, repair);
stopWork(); stopWork();
writeInt(errors, to); writeInt(errors, to);