Branch: refs/heads/master
Home: https://github.com/NixOS/nixpkgs
Commit: 0c0f068f35e5302c07ad32eb5a301ce50b23ddac
https://github.com/NixOS/nixpkgs/commit/0c0f068f35e5302c07ad32eb5a301ce50b23ddac
Author: Christian Kauhaus <[email protected]>
Date: 2016-07-02 (Sat, 02 Jul 2016)
Changed paths:
M pkgs/tools/system/cron/default.nix
Log Message:
-----------
cron: fix crontab(5) and cron job PATH
Switch off HAVE_SAVED_UIDS since it activates a code path for temporary
privilege dropping which does not work on NixOS.
Vixie-cron's sources ship with two implementations. Unfortunately, the
one activated by HAVE_SAVED_UIDS (using setuid()) does not work on
NixOS. Saved UIDs work only if the program which is using them has the
setuid bit set on its own executable, not if called from a setuid
wrapper (as we do it in NixOS). The other implementation (using
setreuid()) works without problems.
Quote from
<http://stackoverflow.com/questions/8499296/realuid-saved-uid-effective-uid-whats-going-on>:
If you're euid is root and you change the uid, the privileges gets
dropped permanently.If effective user id is not root then saved user
id is never touched and you can regain the root privilege back
anytime you want in your program.
Also extend the default PATH with NixOS-specific bin directories as
vixie-cron's default is not really usable on NixOS.
Re #16518
Closes #16522
_______________________________________________
nix-commits mailing list
[email protected]
http://lists.science.uu.nl/mailman/listinfo/nix-commits
