My nixpkgs mirror for patching things.
Go to file
aszlig 536feffc68
chromium: Fix userns patch for kernel 3.18.2.
Writing the gid_map is already non-fatal, but the actual sandbox process
still tries to setresgid() to nogroup (usually 65534). This however
fails, because if user namespace sandboxing is present, the namespace
doesn't have CAP_SETGID at this point.

Fortunately, the effective GID is already 65534, so we just need to
check whether the target gid matches and only(!) setresgid() if it
doesn't.

So if someone would run a SUID version of the sandbox, it would still
work nonetheless without a negative impact on security.

Fixes #5730, thanks to @wizeman for reporting and initial debugging.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2015-01-13 06:18:10 +01:00
doc Change occurrences of gcc to the more general cc 2014-12-26 11:06:21 -06:00
lib mkOverridable: Use functors to allow overridable functions 2015-01-09 13:26:34 -05:00
maintainers Travis: check tarball creation even for pull requests 2015-01-04 14:02:07 +01:00
nixos /etc/ssh/ssh_known_hosts: refactor and fix #5612 2015-01-11 22:14:25 +01:00
pkgs chromium: Fix userns patch for kernel 3.18.2. 2015-01-13 06:18:10 +01:00
.gitignore Add .DS_Store to gitignore so we Mac users don't accidentally pollute nixpkgs with ugliness 2014-08-09 20:53:36 -04:00
.travis.yml Travis: chop build in install and build phases 2014-10-15 11:05:12 +02:00
.version release: 15.04 -> 15.05 2014-12-09 15:09:06 +01:00
COPYING * Applying an MIT-style license to Nixpkgs. 2006-04-25 16:50:34 +00:00
default.nix mkOverridable: Use functors to allow overridable functions 2015-01-09 13:26:34 -05:00
README.md typo 2015-01-04 16:29:25 +01:00