Ludovic Courtès 7578c25b93 least-authority: Add support for changing UIDs/GIDs before exec. ...

Fixes <https://issues.guix.gnu.org/67175>.

* guix/least-authority.scm (least-authority-wrapper): Add #:user
and #:group.
[code]: Add calls to ‘setgid’ and ‘setuid’ when appropriate.

Change-Id: I2aad8e5686b42b5c92fc306b114c5c60cb8bc551

2023-12-22 00:31:41 +01:00

..

build

build-system: Add ‘composer-build-system’.

2023-12-18 23:16:55 +01:00

build-system

build-system/composer: Do not import host-side Guile-JSON modules.

2023-12-18 23:16:57 +01:00

import

import/cran: Export a few more variables and procedures.

2023-12-19 14:12:59 +01:00

platforms

guix: platform: Add platform-rust-target.

2023-12-11 13:50:48 +02:00

scripts

guix: import: Add composer importer.

2023-12-18 23:16:28 +01:00

store

store: Tolerate non-existent GC root directories.

2023-06-18 23:36:25 +02:00

tests

tests: http: Allow responses to specify a path.

2023-05-31 23:25:24 +02:00

android-repo-download.scm

download: Refer to the 'guile-gnutls' package and not 'gnutls'.

2023-05-11 13:23:08 +02:00

avahi.scm

avahi: Fix exception when #:timeout is #f.

2023-07-11 15:47:56 +02:00

base16.scm

…

base32.scm

guix: Strip #:use-module lists.

2023-03-13 15:08:33 +01:00

base64.scm

…

build-system.scm

…

bzr-download.scm

gnu: bazaar: Obsolete with breezy.

2022-05-31 14:54:02 -04:00

cache.scm

cache: 'file-expiration-time' uses 'lstat', not 'stat'.

2023-07-11 15:47:56 +02:00

channels.scm

profiles: Hooks honor the #:system parameter of ‘profile-derivation’.

2023-10-28 00:17:24 +02:00

ci.scm

ci: Reify the timestamps of evaluations.

2023-06-02 15:47:27 +02:00

colors.scm

colors: Add 'colorize-full-matches'.

2022-04-19 18:07:49 +02:00

combinators.scm

…

config.scm.in

build: Add dependency on Git.

2023-09-26 17:36:58 +02:00

cpio.scm

cpio: Properly handle Unicode characters in file names.

2023-02-25 14:50:33 -05:00

cpu.scm

guix: cpu: Add gcc-architecture->micro-architecture-level mapping.

2023-07-12 16:48:28 +03:00

cve.scm

…

cvs-download.scm

download: Refer to the 'guile-gnutls' package and not 'gnutls'.

2023-05-11 13:23:08 +02:00

d3.v3.js

…

deprecation.scm

guix: Add define-deprecated/public-alias.

2022-04-12 20:32:32 +02:00

derivations.scm

guix: Strip #:use-module lists.

2023-03-13 15:08:33 +01:00

describe.scm

…

diagnostics.scm

diagnostics: Factorize 'absolute-location'.

2023-05-31 23:25:25 +02:00

discovery.scm

guix: Strip #:use-module lists.

2023-03-13 15:08:33 +01:00

docker.scm

…

download.scm

gnu-maintenance: Allow mirror URLs to fallback to the generic HTML updater.

2023-08-26 11:38:56 -04:00

elf.scm

…

ftp-client.scm

ftp-client: 'connect*' retries until the timeout has expired.

2023-05-04 13:08:59 +02:00

gexp.scm

gexp: #:references-graphs accepts and honors <gexp-input> records.

2023-12-22 00:31:40 +01:00

git-authenticate.scm

guix: Strip #:use-module lists.

2023-03-13 15:08:33 +01:00

git-download.scm

git-download: Add support for Git Large File Storage (LFS).

2023-11-07 12:33:26 -05:00

git.scm

git: Shell out to ‘git gc’ when necessary.

2023-11-22 16:51:47 +01:00

glob.scm

…

gnu-maintenance.scm

gnu-maintenance: Support URI list of mixed mirrors, HTTP URLs.

2023-09-11 23:39:13 -04:00

gnupg.scm

…

grafts.scm

grafts: Use the right locale package.

2023-12-03 23:55:08 +01:00

graph.js

…

graph.scm

graph: Add GraphML backend.

2023-08-25 14:24:43 +02:00

hash.scm

…

hg-download.scm

download: Refer to the 'guile-gnutls' package and not 'gnutls'.

2023-05-11 13:23:08 +02:00

http-client.scm

http-client: 'http-fetch/cached' converts strings to URIs.

2022-05-22 01:07:52 +02:00

i18n.scm

…

inferior.scm

time-machine: Make target commit check cheaper.

2023-11-05 23:23:23 +01:00

ipfs.scm

guix: Strip #:use-module lists.

2023-03-13 15:08:33 +01:00

least-authority.scm

least-authority: Add support for changing UIDs/GIDs before exec.

2023-12-22 00:31:41 +01:00

licenses.scm

licenses: Add Arphic-1999 (Aprhic Public License).

2023-08-01 19:40:19 +08:00

lint.scm

lint: Speed up the formatting linter.

2023-11-05 17:51:38 +00:00

man-db.scm

guix: Index the man-db database via man pages names.

2022-03-02 00:00:55 -05:00

memoization.scm

…

modules.scm

modules: Recognize #:declarative?.

2022-12-02 23:20:54 +01:00

monad-repl.scm

monad-repl: Add REPL commands to inspect package arguments.

2023-12-04 22:26:38 +01:00

monads.scm

monads: Add 'mparameterize'.

2022-07-10 23:57:14 +02:00

nar.scm

…

narinfo.scm

substitute: If a server's nar URL is 404, try the next one(s).

2023-05-30 00:15:29 +02:00

openpgp.scm

…

packages.scm

packages: Honor target system for the inputs to ‘patch-and-repack’.

2023-12-03 23:55:08 +01:00

pki.scm

guix: Strip #:use-module lists.

2023-03-13 15:08:33 +01:00

platform.scm

guix: platform: Add platform-rust-target.

2023-12-11 13:50:48 +02:00

profiles.scm

gnu: Use ‘libc-utf8-locales-for-target’.

2023-12-02 12:25:45 +01:00

profiling.scm

…

progress.scm

tests: Import (guix build syscalls) when (guix build store-copy) is used.

2023-11-25 16:29:25 +01:00

quirks.scm

…

read-print.scm

read-print: Properly indent ‘parameterize’.

2023-11-22 16:51:46 +01:00

records.scm

records: Remove "guix" from error message.

2023-06-09 14:19:14 +02:00

remote.scm

guix: Strip #:use-module lists.

2023-03-13 15:08:33 +01:00

repl.scm

…

rpm.scm

pack: Register extra /usr/share sub-directories as FHS.

2023-02-22 10:41:35 -05:00

scripts.scm

guix: Strip #:use-module lists.

2023-03-13 15:08:33 +01:00

search-paths.scm

search-paths: Add GCC search paths.

2023-10-04 23:30:41 -04:00

self.scm

gnu: Use ‘libc-utf8-locales-for-target’.

2023-12-02 12:25:45 +01:00

serialization.scm

guix: Strip #:use-module lists.

2023-03-13 15:08:33 +01:00

sets.scm

…

ssh.scm

ssh: Also print the user when authentication fails.

2023-08-22 11:17:53 +02:00

status.scm

status: Guard against a numerical overflow condition.

2023-04-12 08:29:37 -04:00

store.scm

daemon: Implement ‘substitute-urls’ RPC.

2023-12-11 23:18:53 +01:00

substitutes.scm

substitute: Gracefully handle TLS termination while fetching narinfos.

2023-03-27 18:48:51 +02:00

svn-download.scm

svn-download: Handle the single file case when downloading a nar.

2023-07-18 18:16:55 +02:00

swh.scm

…

tests.scm

tests: Set a hard build timeout.

2022-02-14 11:23:07 +01:00

transformations.scm

transformations: Add support for zig.

2023-12-03 09:58:34 +02:00

ui.scm

ui: Handle EPIPE errors when displaying Guix version.

2023-10-17 14:51:53 +02:00

upstream.scm

upstream: Compare symbols to symbols.

2023-09-13 22:17:21 +02:00

utils.scm

guix: Add target-avr?.

2023-12-11 11:53:54 +02:00

workers.scm

…