nixpkgs/nixos/modules/installer
Profpatsch 0e444785a1 installer/tools/get-version-suffix: set --git-dir
The `nixos-rebuild` tool calls `get-version-suffix` to figure out the
git revision of the nixpkgs directory if there is a .git.

https://nvd.nist.gov/vuln/detail/CVE-2022-24765 made git throw an
error if the .git search logic is not turned off and a user
tries to access a `.git` directory they don’t own (otherwise a
different user could trick them into setting arbitrary git config).

So from now on we should always explicitely set `--git-dir`, which
turns this search logic (and thus the security check) off.
2022-06-27 14:28:03 +02:00
..
cd-dvd installation-cd: prevent gnome from sleeping 2022-06-05 14:10:37 -07:00
netboot nixos/…/kexec-boot.nix: move into netboot.nix, rename to kexecTree 2022-06-09 19:59:03 +02:00
scan
sd-card Merge pull request #151633 from wucke13/sd-image-experiment 2022-06-22 14:48:21 +02:00
tools installer/tools/get-version-suffix: set --git-dir 2022-06-27 14:28:03 +02:00
virtualbox-demo.nix nixos/nix-daemon: use structural settings 2022-01-26 21:04:50 -05:00