Age | Commit message (Expand) | Author |
2006-12-07 | * When not running as root, call the setuid helper to change the | Eelco Dolstra |
2006-12-07 | * Change the ownership of store paths to the Nix account before | Eelco Dolstra |
2006-12-07 | * Pass the actual build user to the setuid helper. | Eelco Dolstra |
2006-12-07 | * If Nix is not running as root, call the setuid helper to start the | Eelco Dolstra |
2006-12-07 | * Sanity check. | Eelco Dolstra |
2006-12-07 | * Move killUser() to libutil so that the setuid helper can use it. | Eelco Dolstra |
2006-12-06 | * Change the ownership of the current directory to the build user. | Eelco Dolstra |
2006-12-06 | * Verify that the desired target user is in the build users group (as | Eelco Dolstra |
2006-12-06 | * Check that the caller is allowed to call the setuid helper. The | Eelco Dolstra |
2006-12-06 | * Fix the safety check. | Eelco Dolstra |
2006-12-06 | * Get rid of `build-users'. We'll just take all the members of | Eelco Dolstra |
2006-12-06 | * nix-setuid-helper: allow running programs under a different uid. | Eelco Dolstra |
2006-12-06 | * Start of the setuid helper (the program that performs the operations | Eelco Dolstra |
2006-12-05 | * Be less chatty. | Eelco Dolstra |
2006-12-05 | * Urgh. Do setgid() before setuid(), because the semantics of setgid() | Eelco Dolstra |
2006-12-05 | * Tricky: child processes should not send data to the client since | Eelco Dolstra |
2006-12-05 | * FreeBSD returns ESRCH when there are no processes to kill. | Eelco Dolstra |
2006-12-05 | * Oops! In daemon mode, we can't run as root either if build-users is empty. | Eelco Dolstra |
2006-12-05 | * Use an explicit handler for SIGCHLD, since SIG_IGN doesn't do the | Eelco Dolstra |
2006-12-05 | * Better message. | Eelco Dolstra |
2006-12-05 | * Ugly hack to handle spurious SIGPOLLs. | Eelco Dolstra |
2006-12-05 | * Some renaming. | Eelco Dolstra |
2006-12-05 | * Allow unprivileged users to run the garbage collector and to do | Eelco Dolstra |
2006-12-05 | * The determination of the root set should be made by the privileged | Eelco Dolstra |
2006-12-05 | * findRoots: return a map from the symlink (outside of the store) to | Eelco Dolstra |
2006-12-05 | * In addPermRoot, check that the root that we just registered can be | Eelco Dolstra |
2006-12-04 | * Add indirect root registration to the protocol so that unprivileged | Eelco Dolstra |
2006-12-04 | * Not every OS knows about SIGPOLL. | Eelco Dolstra |
2006-12-04 | * Don't redirect stderr. | Eelco Dolstra |
2006-12-04 | * Handle exceptions and stderr for all protocol functions. | Eelco Dolstra |
2006-12-04 | * Daemon mode (`nix-worker --daemon'). Clients connect to the server | Eelco Dolstra |
2006-12-04 | * When NIX_REMOTE=daemon, connect to /nix/var/nix/daemon.socket | Eelco Dolstra |
2006-12-04 | * Refactoring. | Eelco Dolstra |
2006-12-04 | * Pass the verbosity level to the worker. | Eelco Dolstra |
2006-12-04 | * Install the worker in bindir, not libexecdir. | Eelco Dolstra |
2006-12-03 | * Doh. | Eelco Dolstra |
2006-12-03 | * Don't run setuid root when build-users is empty. | Eelco Dolstra |
2006-12-03 | * Removed `build-allow-root'. | Eelco Dolstra |
2006-12-03 | * Use setreuid if setresuid is not available. | Eelco Dolstra |
2006-12-03 | * Handle a subtle race condition: the client closing the socket | Eelco Dolstra |
2006-12-03 | * Some hardcore magic to handle asynchronous client disconnects. | Eelco Dolstra |
2006-12-03 | * Use a Unix domain socket instead of pipes. | Eelco Dolstra |
2006-12-03 | * Better error message if the worker doesn't start. | Eelco Dolstra |
2006-12-03 | * Pid::kill() should be interruptable. | Eelco Dolstra |
2006-12-03 | * Some hackery to propagate the worker's stderr and exceptions to the | Eelco Dolstra |
2006-12-03 | * Run the worker in a separate session to prevent terminal signals | Eelco Dolstra |
2006-12-02 | * Move addTempRoot() to the store API, and add another function | Eelco Dolstra |
2006-12-02 | * Doh. | Eelco Dolstra |
2006-12-02 | * Remove most of the old setuid code. | Eelco Dolstra |
2006-12-02 | * Remove SwitchToOriginalUser, we're not going to need it anymore. | Eelco Dolstra |