Ludovic Courtès 0163c732a1 daemon: Drop Linux ambient capabilities before executing builder. ...

* config-daemon.ac: Check for <sys/prctl.h>.
* nix/libstore/build.cc (DerivationGoal::runChild): When ‘useChroot’ is
true, call ‘prctl’ to drop all ambient capabilities.

Change-Id: If34637fc508e5fb6d278167f5df7802fc595284f

2025-03-26 17:57:44 +01:00

4.5 KiB

Raw Blame History

View Raw