futurile/guix-play
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
e05f7c55d7
guix-play/gnu/build
History
Ludovic Courtès e05f7c55d7
file-systems: Open files with O_CLOEXEC. 
Since this code is run from PID 1, this ensures file descriptors to
sensitive files and devices are not accidentally leaked to
sub-processes.

* gnu/build/file-systems.scm (call-with-input-file): New procedure.
(mount-file-system): Use 'close-fdes' + 'open-fdes'.
2022-09-08 16:22:21 +02:00
..
accounts.scm system: Allow 'chfn' to change the user's full name. 2022-01-01 15:10:12 +01:00
activation.scm initrd: Use non-hyphenated kernel command-line parameter names. 2022-03-01 10:30:17 -05:00
bootloader.scm image: Add support for 32bit UEFI. 2022-06-24 10:21:06 +02:00
chromium-extension.scm gnu: modifying make-chromium-extension to rely on node-crx3. 2022-07-20 16:50:08 +02:00
cross-toolchain.scm gnu: cross-base: Switch back to 'CROSS_C_INCLUDE_PATH' & co. 2020-02-12 20:35:43 +01:00
dbus-service.scm services: jami: Modernize to adjust to Shepherd 0.9+ changes. 2022-06-10 23:52:33 -04:00
file-systems.scm file-systems: Open files with O_CLOEXEC. 2022-09-08 16:22:21 +02:00
hurd-boot.scm initrd: Use non-hyphenated kernel command-line parameter names. 2022-03-01 10:30:17 -05:00
image.scm build: image: Make partition uuid optional. 2022-08-30 19:29:58 +02:00
install.scm store-copy: 'populate-store' can optionally deduplicate files. 2020-12-15 17:32:10 +01:00
jami-service.scm services: jami: Modernize to adjust to Shepherd 0.9+ changes. 2022-06-10 23:52:33 -04:00
linux-boot.scm linux-boot: Resume from hibernation after pre-boot. 2022-09-04 02:00:00 +02:00
linux-container.scm linux-container: Add #:child-is-pid1? parameter to 'call-with-container'. 2022-05-01 21:30:35 +02:00
linux-initrd.scm store-copy: 'populate-store' can optionally deduplicate files. 2020-12-15 17:32:10 +01:00
linux-modules.scm linux-modules: Ignore EINVAL in ‘modprobe’ mode. 2021-12-16 12:53:52 -05:00
locale.scm gnu: glibc-locales: Install symlinks using the normalized codeset. 2019-06-07 21:50:18 +02:00
marionette.scm build: marionette: Add support for Tesseract OCR. 2022-08-28 22:10:20 -04:00
secret-service.scm secret-service: Allow cooperative scheduling when Fibers is used. 2022-04-07 00:08:56 +02:00
shepherd.scm shepherd: Set #o640 permissions for log file of service in container. 2022-09-02 16:32:16 +05:30
svg.scm bootloader: grub: Use 'with-extensions'. 2018-06-01 15:21:28 +02:00