Merge pull request #11684 from geofft/real-root-mode-0500

libstore: Make our sandbox pivot_root directory accessible to ourself
2024-10-14 14:35:37 +02:00
parent 71c2d82302 5a794d9366
commit b11c331c53
1 changed files with 1 additions and 1 deletions
--- a/src/libstore/unix/build/local-derivation-goal.cc
+++ b/src/libstore/unix/build/local-derivation-goal.cc
@@ -2008,7 +2008,7 @@ void LocalDerivationGoal::runChild()
            if (chdir(chrootRootDir.c_str()) == -1)
                throw SysError("cannot change directory to '%1%'", chrootRootDir);

-            if (mkdir("real-root", 0) == -1)
+            if (mkdir("real-root", 0500) == -1)
                throw SysError("cannot create real-root directory");

            if (pivot_root(".", "real-root") == -1)