Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-05-29 | Add a seccomp filter to prevent creating setuid/setgid binaries | Eelco Dolstra | |
This prevents builders from setting the S_ISUID or S_ISGID bits, preventing users from using a nixbld* user to create a setuid/setgid binary to interfere with subsequent builds under the same nixbld* uid. This is based on aszlig's seccomp code (47f587700d646f5b03a42f2fa57c28875a31efbe). Reported by Linus Heckemann. | |||
2017-05-15 | Add --with-sandbox-shell configure flag | Eelco Dolstra | |
And add a 116 KiB ash shell from busybox to the release build. This helps to make sandbox builds work out of the box on non-NixOS systems and with diverted stores. | |||
2017-05-10 | Replace readline by linenoise | Eelco Dolstra | |
Using linenoise avoids a license compatibility issue (#1356), is a lot smaller and doesn't pull in ncurses. | |||
2017-04-28 | Check for libreadline | Eelco Dolstra | |
2017-04-26 | Simplify building nix-perl in nix-shell | Eelco Dolstra | |
2017-04-25 | Make "nix repl" build | Eelco Dolstra | |
2017-04-10 | shell.nix: Remove more dependencies | Eelco Dolstra | |
Thanks @copumpkin. | |||
2017-04-10 | shell.nix: Remove obsolete flags | Eelco Dolstra | |
2017-03-15 | Add support for brotli compression | Eelco Dolstra | |
Build logs on cache.nixos.org are compressed using Brotli (since this allows them to be decompressed automatically by Chrome and Firefox), so it's handy if "nix log" can decompress them. | |||
2017-01-24 | shell.nix: Add a flag for using clang | Eelco Dolstra | |
2016-12-19 | Revert "shell.nix: Add libseccomp" | Eelco Dolstra | |
This reverts commit 1df82b62456b3194b3d8be0562e886cf16bf9379. | |||
2016-12-15 | Merge branch 'master' of github.com:NixOS/nix | Eelco Dolstra | |
2016-12-15 | shell.nix: Add libseccomp | Eelco Dolstra | |
2016-12-11 | Add missing DBD::SQLite to shell.nix | Linus Heckemann | |
2016-12-06 | Add shell.nix | Eelco Dolstra | |