diff options
author | Caleb Ristvedt <caleb.ristvedt@cune.org> | 2019-12-12 07:04:07 -0600 |
---|---|---|
committer | Caleb Ristvedt <caleb.ristvedt@cune.org> | 2020-04-13 13:14:50 -0500 |
commit | 73da0e3a2396cabbeafa12b31f37ada05a95e762 (patch) | |
tree | d52da38238286e5cca486222fef95a136c56ce5e /gnu/packages/patches/audacity-fix-ffmpeg-binding.patch | |
parent | 14499efc250282cd0fc305fe19a927feb26d1916 (diff) | |
download | guix-73da0e3a2396cabbeafa12b31f37ada05a95e762.tar.gz |
gnu: linux-container: Make it more suitable for derivation-building.
* gnu/build/linux-container.scm (mount-file-systems): First remount all filesystems in the current mount namespace as private (by mounting / with MS_PRIVATE and MS_REC), so that the set of mounts cannot increase except from within the container. Also, the tmpfs mounted over the chroot directory now inherits the chroot directory's permissions (p11-kit, for example, has a test that assumes that the root directory is not writable for the current user, and tmpfs is by default 1777 when created). * guix/build/syscalls.scm (MS_PRIVATE, MS_REC): new variables.
Diffstat (limited to 'gnu/packages/patches/audacity-fix-ffmpeg-binding.patch')
0 files changed, 0 insertions, 0 deletions