Ludovic Courtès e05f7c55d7

file-systems: Open files with O_CLOEXEC. ...

Since this code is run from PID 1, this ensures file descriptors to
sensitive files and devices are not accidentally leaked to
sub-processes.

* gnu/build/file-systems.scm (call-with-input-file): New procedure.
(mount-file-system): Use 'close-fdes' + 'open-fdes'.

2022-09-08 16:22:21 +02:00

..

bootloader

bootloader: Add device-tree-support? option.

2022-08-30 08:50:44 +02:00

build

file-systems: Open files with O_CLOEXEC.

2022-09-08 16:22:21 +02:00

home

services: Use the new maybe/unset API.

2022-08-25 00:10:32 -04:00

installer

installer: Fix segfault on double logical partition removal.

2022-09-01 18:43:28 +02:00

machine

Fix misspelling of GUIX_DIGITAL_OCEAN_TOKEN.

2022-09-04 17:57:02 +02:00

packages

gnu: zuo: Use English in description.

2022-09-08 15:50:39 +02:00

services

services: nginx: Add 'shepherd-requirement' configuration field.

2022-09-06 16:58:12 +02:00

system

system: images: Define the platform in image-types.

2022-09-07 14:24:53 +02:00

tests

tests: dict: Increase VM memory-size.

2022-09-08 15:17:31 +02:00

artwork.scm

gnu: artwork: Update repository to latest commit.

2022-08-11 11:55:19 -04:00

bootloader.scm

bootloader: Wrap lines.

2022-08-30 08:51:12 +02:00

ci.scm

ci: Fix the images specification.

2022-08-17 11:29:38 +02:00

home.scm

home: Fix docstring.

2022-08-19 18:55:41 +03:00

image.scm

image: Use #true and #false.

2022-09-07 14:26:34 +02:00

installer.scm

installer: Render the final configuration with (guix read-print).

2022-08-08 11:54:24 +02:00

local.mk

gnu: python-apsw: Update to 3.39.2.1.

2022-09-07 22:02:40 +02:00

machine.scm

…

packages.scm

…

services.scm

services: provenance: Use 'current-channels' to obtain provenance data.

2022-08-30 00:40:04 +02:00

system.scm

gnu: system: Add fusermount3 to setuid-programs.

2022-07-14 15:16:23 -04:00

tests.scm

…