4 ms·
Fair, but at the same time, "setuid" is a war where everyone looses, IMO :). Since the issue was first closed, there are some solutions for NixOS that I hope f
by Ericson2314 5y ago
Fair, but at the same time, "setuid" is a war where everyone looses, IMO :).
Since the issue was first closed, there are some solutions for NixOS that I hope for discoverable. For Nixpkgs alone, I really don't think see any solution that is both secure and ergonomic -- setuid is bad.
- totony 5y agoSetuid has been replaced by capabilities, but nix faces the same struggles it has for setuid (only supports it through a wrapper, and that was after a "wontfix" according to the bug tracker). More than that though, the mentality that you can just patch away critical features (like setuid) without telling the user is imo unhealthy for an OS.