diff options
author | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2014-12-10 18:01:01 +0100 |
---|---|---|
committer | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2014-12-10 18:01:01 +0100 |
commit | 851b47bd7de35f4464a67c991d55cbcb07230edc (patch) | |
tree | beab0f6efc1be15bf51b7f493ea47b5b7224de4e /src/libstore | |
parent | 0e8fc118b3d2d3bb6f9b0a918bf8ceb3927774cd (diff) |
Don't do vfork in conjunction with setuid
Diffstat (limited to 'src/libstore')
-rw-r--r-- | src/libstore/build.cc | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/libstore/build.cc b/src/libstore/build.cc index ab8923bbd..36436d7eb 100644 --- a/src/libstore/build.cc +++ b/src/libstore/build.cc @@ -1914,6 +1914,8 @@ void DerivationGoal::startBuilder() builderOut.create(); /* Fork a child to build the package. */ + ProcessOptions options; + options.allowVfork = !buildUser.enabled(); pid = startProcess([&]() { runChild(); }); |