rekahsoft/guix
1
1
Fork 0
Code Issues Pull Requests Releases Wiki Activity
81c580c866
guix/tests
History
Ludovic Courtès 81c580c866
daemon: Make 'profiles/per-user' non-world-writable. 
Fixes <https://bugs.gnu.org/37744>.
Reported at <https://www.openwall.com/lists/oss-security/2019/10/09/4>.

Based on Nix commit 5a303093dcae1e5ce9212616ef18f2ca51020b0d
by Eelco Dolstra <edolstra@gmail.com>.

* nix/libstore/local-store.cc (LocalStore::LocalStore): Set 'perUserDir'
to #o755 instead of #o1777.
(LocalStore::createUser): New function.
* nix/libstore/local-store.hh (LocalStore): Add it.
* nix/libstore/store-api.hh (StoreAPI): Add it.
* nix/nix-daemon/nix-daemon.cc (performOp): In 'wopSetOptions', add
condition to handle "user-name" property and honor it.
(processConnection): Add 'userId' parameter.  Call 'store->createUser'
when userId is not -1.
* guix/profiles.scm (ensure-profile-directory): Note that this is now
handled by the daemon.
* guix/store.scm (current-user-name): New procedure.
(set-build-options): Add #:user-name parameter and pass it to the daemon.
* tests/guix-daemon.sh: Test the creation of 'profiles/per-user' when
listening on a TCP socket.
* tests/store.scm ("profiles/per-user exists and is not writable")
("profiles/per-user/$USER exists"): New tests.
2019-10-16 22:53:40 +02:00
..
accounts.scm accounts: Delete duplicate entries. 2019-08-28 00:27:14 +02:00
base16.scm
base32.scm Switch to Guile-Gcrypt. 2018-09-04 17:25:11 +02:00
base64.scm
bournish.scm
build-utils.scm utils: Add 'invoke/quiet'. 2019-06-17 16:13:36 +02:00
builders.scm tests: Remove expensive and pointless test. 2019-06-14 21:57:18 +02:00
cache.scm
challenge.scm tests: Add 'test-assertm' to (guix tests). 2018-11-12 23:37:13 +01:00
channels.scm channels: Allow news entries to refer to a tag. 2019-09-23 10:38:44 +02:00
combinators.scm
containers.scm tests: Skip container test when lacking kernel support. 2019-10-15 10:21:41 +02:00
cpan.scm Revert "import: cpan: Adapt for the change to guile-json version 3." 2019-08-22 14:24:11 -04:00
cpio.scm
cran.scm
crate.scm import: crate: Correct interpretation of dual-licensing strings. 2019-09-04 13:02:27 +02:00
cve-sample.xml
cve.scm
debug-link.scm tests: Add 'test-assertm' to (guix tests). 2018-11-12 23:37:13 +01:00
derivations.scm Merge branch 'master' into core-updates 2019-09-06 20:46:00 -04:00
discovery.scm
elpa.scm
file-systems.scm
gem.scm Switch to Guile-Gcrypt. 2018-09-04 17:25:11 +02:00
gexp.scm gexp: Catch and report non-self-quoting gexp inputs. 2019-09-23 23:41:19 +02:00
git.scm git: Add 'commit-difference'. 2019-09-23 10:38:43 +02:00
glob.scm
gnu-maintenance.scm
grafts.scm Merge branch 'master' into core-updates 2019-06-27 23:33:48 +02:00
graph.scm Merge branch 'staging' into core-updates 2019-03-23 23:16:55 +01:00
gremlin.scm gremlin: Adjust tests for foreign distros. 2019-05-18 12:10:15 +02:00
guix-archive.sh
guix-authenticate.sh
guix-build-branch.sh tests: Adjust '--with-commit' test. 2019-09-04 13:02:27 +02:00
guix-build.sh ui: 'warn-about-load-error' provides hints for unbound variables. 2019-07-20 01:32:17 +02:00
guix-daemon.sh daemon: Make 'profiles/per-user' non-world-writable. 2019-10-16 22:53:40 +02:00
guix-describe.sh Add 'guix describe'. 2018-09-07 11:40:22 +02:00
guix-download.sh
guix-environment-container.sh environment: '--container' honors '--preserve'. 2019-10-03 23:48:59 +02:00
guix-environment.sh Merge branch 'master' into core-updates 2019-08-22 15:53:27 -04:00
guix-gc.sh guix gc: Add '--list-roots'. 2019-04-10 17:09:47 +02:00
guix-graph.sh
guix-hash.sh
guix-lint.sh
guix-pack-localstatedir.sh pack: '--localstatedir' and '-R' tests gracefully handle missing /gnu/store. 2019-05-18 12:23:31 +02:00
guix-pack-relocatable.sh pack: '-R' honors the requested output. 2019-08-23 18:41:49 +02:00
guix-pack.sh pack: Add '--root'. 2019-05-22 00:09:41 +02:00
guix-package-aliases.sh guix package: '--show' ignores deprecated packages. 2019-09-21 16:48:36 +02:00
guix-package-net.sh tests: Make builds less expensive. 2019-06-14 21:57:39 +02:00
guix-package.sh guix package: Add '--list-profiles'. 2019-09-26 11:43:26 +02:00
guix-system.sh tests: Adjust wildcard when testing OS examples. 2019-04-29 21:57:52 +02:00
hackage.scm import: hackage: Add two expected failing test cases. 2019-06-20 14:07:01 +02:00
import-utils.scm maint: Switch to Guile-JSON 3.x. 2019-07-25 00:16:41 +02:00
inferior.scm inferior: Propagate '&store-protocol-error' error conditions. 2019-09-21 16:48:36 +02:00
lint.scm lint: Add 'archival' checker. 2019-09-02 15:25:01 +02:00
lzlib.scm lzlib: Add 'make-lzip-input-port/compressed'. 2019-05-27 22:47:24 +02:00
modules.scm
monads.scm
nar.scm serialization: 'restore-file' errors out upon non-convertible file names. 2019-01-18 17:51:34 +01:00
networking.scm services: openntpd: Add test for issue #3731. 2019-09-08 23:15:32 +09:00
opam.scm tests: opam: Fix input type in import test. 2019-09-07 22:25:14 +02:00
pack.scm pack: Create /tmp in Docker images. 2019-08-27 12:20:44 +02:00
packages.scm packages: 'supported-package?' binds '%current-system' for graph traversal. 2019-09-06 14:41:58 +02:00
pki.scm Switch to Guile-Gcrypt. 2018-09-04 17:25:11 +02:00
print.scm import: print: Honor the outputs of inputs (!). 2019-06-07 22:49:47 +02:00
processes.scm Add 'guix processes'. 2018-10-29 00:13:38 +01:00
profiles.scm tests: Make builds less expensive. 2019-06-14 21:57:39 +02:00
publish.scm publish: '--compression' can be repeated. 2019-06-02 22:01:57 +02:00
pypi.scm import: pypi: Include optional test inputs as native-inputs. 2019-07-02 10:08:00 +09:00
records.scm records: Support custom 'this' identifiers. 2019-03-30 11:08:39 +01:00
scripts-build.scm guix build: '--with-commit' makes recursive checkouts. 2019-03-17 22:55:01 +01:00
scripts.scm tests: Add missing import. 2019-03-24 00:13:53 +01:00
search-paths.scm build: Remove 'gnu/packages/bootstrap' and its binaries. 2019-06-14 22:09:38 +02:00
services.scm guix system: Add 'reconfigure' module. 2019-07-26 19:19:49 +02:00
sets.scm
signing-key.pub
signing-key.sec
size.scm tests: Add 'test-assertm' to (guix tests). 2018-11-12 23:37:13 +01:00
snix.scm
status.scm status: Keep track of the current build phase. 2019-02-05 12:03:25 +01:00
store-database.scm database: Reset timestamps to one second after the Epoch. 2018-07-20 15:01:33 +02:00
store-deduplication.scm deduplication: Gracefully handle ENOSPC raised by 'link' calls. 2018-12-14 12:07:24 +01:00
store-roots.scm Add (guix store roots). 2019-04-10 17:09:47 +02:00
store.scm daemon: Make 'profiles/per-user' non-world-writable. 2019-10-16 22:53:40 +02:00
substitute.scm substitute: Select the best compression methods. 2019-06-02 22:01:57 +02:00
swh.scm swh: Add hooks for rate limiting handling. 2019-09-02 15:25:01 +02:00
syscalls.scm syscalls: Add 'add-to-entropy-count'. 2019-10-05 22:05:02 +02:00
system.scm system: Mapped devices needed for boot do not yield Shepherd services. 2018-06-21 23:54:15 +02:00
test.drv
texlive.scm
ui.scm ui: 'relevance' connects regexps with a logical and. 2019-09-19 23:24:04 +02:00
union.scm tests: Make builds less expensive. 2019-06-14 21:57:39 +02:00
upstream.scm upstream: Temporarily skip failing test. 2019-01-28 23:13:40 +01:00
utils.scm utils: canonical-newline-port: Fix handling of carriage return at buffer end. 2019-06-20 14:07:01 +02:00
uuid.scm uuid: 'fat-uuid->string' preserves leading zeros. 2019-05-07 12:18:44 +02:00
workers.scm
zlib.scm tests: Gracefully skip zlib test when zlib is missing. 2019-04-16 17:30:22 +02:00