Branch: refs/heads/master
Home: https://github.com/NixOS/nixpkgs
Commit: d4d7bfe07bf97efb228ea949a1f09644e924b82d
https://github.com/NixOS/nixpkgs/commit/d4d7bfe07bf97efb228ea949a1f09644e924b82d
Author: Joachim Fasting <[email protected]>
Date: 2016-05-10 (Tue, 10 May 2016)
Changed paths:
M nixos/modules/security/grsecurity.nix
M pkgs/build-support/grsecurity/default.nix
Log Message:
-----------
grsecurity: add option to disable chroot caps restriction
The chroot caps restriction disallows chroot'ed processes from running
any command that requires `CAP_SYS_ADMIN`, breaking `nixos-rebuild`. See
e.g., https://github.com/NixOS/nixpkgs/issues/15293
This significantly weakens chroot protections, but to break
nixos-rebuild out of the box is too severe.
_______________________________________________
nix-commits mailing list
[email protected]
http://lists.science.uu.nl/mailman/listinfo/nix-commits
