diff options
| author | Ben Radford <104896700+benradf@users.noreply.github.com> | 2023-07-12 12:32:57 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-07-12 12:32:57 +0100 |
| commit | 0309f6b5b8ca354e1a43d320928d3d546ce7f878 (patch) | |
| tree | 024665bce567607929ce9a2ecb4788cb82a7e6c7 /src/libstore/globals.hh | |
| parent | 41412dc4ae0fec2d08335c19724276d99e0c6056 (diff) | |
Update src/libstore/globals.hh
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Diffstat (limited to 'src/libstore/globals.hh')
| -rw-r--r-- | src/libstore/globals.hh | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/libstore/globals.hh b/src/libstore/globals.hh index 81fa154bb..d8fda9707 100644 --- a/src/libstore/globals.hh +++ b/src/libstore/globals.hh @@ -530,8 +530,8 @@ public: Nix will attempt to drop supplementary groups when building with sandboxing. However this can fail under some circumstances. - For example, if the user lacks the CAP_SETGID capability. - Search setgroups(2) for EPERM to find more detailed information on this. + For example, if the user lacks the `CAP_SETGID` capability. + Search `setgroups(2)` for `EPERM` to find more detailed information on this. If you encounter such a failure, setting this option to `false` will let you ignore it and continue. But before doing so, you should consider the security implications carefully. |