diff options
| author | Profpatsch <mail@profpatsch.de> | 2022-06-26 18:45:32 +0200 |
|---|---|---|
| committer | Profpatsch <mail@profpatsch.de> | 2022-06-27 14:28:03 +0200 |
| commit | 0e444785a16b0cb278dfd5aaa4d04b7730a269d8 (patch) | |
| tree | 2c559adb214a89394ffa76af964b7b6d7bec6455 /pkgs/development/python-modules/python-mapnik | |
| parent | ec5b885d953af00dbae3ef90114f8f47fdb4b968 (diff) | |
installer/tools/get-version-suffix: set --git-dir
The `nixos-rebuild` tool calls `get-version-suffix` to figure out the
git revision of the nixpkgs directory if there is a .git.
https://nvd.nist.gov/vuln/detail/CVE-2022-24765 made git throw an
error if the .git search logic is not turned off and a user
tries to access a `.git` directory they don’t own (otherwise a
different user could trick them into setting arbitrary git config).
So from now on we should always explicitely set `--git-dir`, which
turns this search logic (and thus the security check) off.
Diffstat (limited to 'pkgs/development/python-modules/python-mapnik')
0 files changed, 0 insertions, 0 deletions