aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBen Radford <104896700+benradf@users.noreply.github.com>2023-07-12 12:32:57 +0100
committerGitHub <noreply@github.com>2023-07-12 12:32:57 +0100
commit0309f6b5b8ca354e1a43d320928d3d546ce7f878 (patch)
tree024665bce567607929ce9a2ecb4788cb82a7e6c7
parent41412dc4ae0fec2d08335c19724276d99e0c6056 (diff)
Update src/libstore/globals.hh
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
-rw-r--r--src/libstore/globals.hh4
1 files changed, 2 insertions, 2 deletions
diff --git a/src/libstore/globals.hh b/src/libstore/globals.hh
index 81fa154bb..d8fda9707 100644
--- a/src/libstore/globals.hh
+++ b/src/libstore/globals.hh
@@ -530,8 +530,8 @@ public:
Nix will attempt to drop supplementary groups when building with sandboxing.
However this can fail under some circumstances.
- For example, if the user lacks the CAP_SETGID capability.
- Search setgroups(2) for EPERM to find more detailed information on this.
+ For example, if the user lacks the `CAP_SETGID` capability.
+ Search `setgroups(2)` for `EPERM` to find more detailed information on this.
If you encounter such a failure, setting this option to `false` will let you ignore it and continue.
But before doing so, you should consider the security implications carefully.