bug#47229: Hardlink mitigation limits

2021-03-29 Thread Ludovic Courtès
Hi Nathan, Nathan Nye skribis: > I'm sharing here for future reference why protected hardlinks alone > did not mitigate the recent LPE security advisory, pre-patch: Thanks a lot for this clarification! Ludo’.

bug#47229: Hardlink mitigation limits

2021-03-23 Thread Nathan Nye
Hello, I'm sharing here for future reference why protected hardlinks alone did not mitigate the recent LPE security advisory, pre-patch: "The reasons why are lines 2633 and 2637 of nix/libstore/build.cc: * https://git.savannah.gnu.org/cgit/guix.git/tree/nix/libstore/build.cc#n2633 * https:/