summary refs log tree commit diff
path: root/gnu/build
diff options
context:
space:
mode:
authorLudovic Courtès <ludo@gnu.org>2022-09-12 14:29:45 +0200
committerLudovic Courtès <ludo@gnu.org>2022-09-13 00:31:04 +0200
commit66fdaf3677e5f7833a02096a2bcb1e9653efbb16 (patch)
treea44aeda93ebf6535b21654f8be3ec113aa38931a /gnu/build
parent32583c8c20b1b55b3d5289af691791749edd5e6f (diff)
downloadguix-66fdaf3677e5f7833a02096a2bcb1e9653efbb16.tar.gz
services: shepherd: Install O_CLOEXEC variant of 'call-with-input-file' & co.
Fixes a bug introduced with the Shepherd 0.9.2 upgrade in commit
1ba0e38267c9ff8bb476285091be6e297bbf136e whereby files opened by, say,
the 'start' method of 'urandom-seed', could leak into the execution
environment of some other service--e.g., 'term-tty4'.

* gnu/services/shepherd.scm (shepherd-configuration-file)[config]:
Override 'call-with-input-file' and 'call-with-output-file'.
Diffstat (limited to 'gnu/build')
0 files changed, 0 insertions, 0 deletions