bug#37744: Per-user profile directory hijack (CVE-2019-17365 for Nix)

Wed, 16 Oct 2019 08:20:33 -0700 

On Wed, Oct 16, 2019 at 05:16:47PM +0200, Tobias Geerinckx-Rice wrote:
> pelzflorian (Florian Pelz) 写道：
> > Why sudo guix pull?  It should be without sudo, am I wrong?
> 
> Guix on ‘foreign’ distributions uses the root profile for the daemon by
> default (i.e. in guix-daemon.service).
> 

Sorry for being imprecise.  I meant on Guix System.

Regards,
Florian
  • bug#37744: Per-user pro... Ludovic Courtès
    • bug#37744: Per-use... Tobias Geerinckx-Rice via Bug reports for GNU Guix
      • bug#37744: Per... Maxim Cournoyer
      • bug#37744: Per... Ludovic Courtès
        • bug#37744:... Tobias Geerinckx-Rice via Bug reports for GNU Guix
          • bug#37... Ludovic Courtès
            • b... Ludovic Courtès
              • ... Ludovic Courtès
              • ... pelzflorian (Florian Pelz)
              • ... Tobias Geerinckx-Rice via Bug reports for GNU Guix
              • ... pelzflorian (Florian Pelz)
              • ... Tobias Geerinckx-Rice via Bug reports for GNU Guix
              • ... Ludovic Courtès
              • ... Tobias Geerinckx-Rice via Bug reports for GNU Guix
              • ... Tobias Geerinckx-Rice via Bug reports for GNU Guix
              • ... Ludovic Courtès
              • ... Ludovic Courtès
              • ... Julien Lepiller
              • ... Ludovic Courtès
              • ... pelzflorian (Florian Pelz)
              • ... Ludovic Courtès

Reply via email to