3 ms·
I don't know much about nix. Does it solve the security problem by preventing access to the majority of your home directory? Or solve it by only allowing you
by ccouzens 6y ago
I don't know much about nix.
Does it solve the security problem by preventing access to the majority of your home directory?
Or solve it by only allowing you to install vetted libraries?
- rowanG077 6y agoYou cannot access the home directory at all during a nix build.
- mixmastamyk 6y agoInteresting, what about when your software runs? Is it still in a chroot or similar?
- rowanG077 6y agoIt's not running in a sandbox. That's not the goal of nix. It's only a package manager/build system.
- mixmastamyk 6y agoOh, then why can it not access the home folder?
- rowanG077 6y agoThe build process is sandboxed. Not the environment you run the application in afterwards.