3
0
Fork 0
forked from mirrors/nixpkgs
nixpkgs/nixos/modules/system
Domen Kožar a6670c1a0b Fixes #18124: atomically replace /var/setuid-wrappers/ (#18186)
Before this commit updating /var/setuid-wrappers/ folder introduced
a small window where NixOS activation scripts could be terminated
and resulted into empty /var/setuid-wrappers/ folder.

That's very unfortunate because one might lose sudo binary.

Instead we use two atomic operations mv and ln (as described in
https://axialcorps.com/2013/07/03/atomically-replacing-files-and-directories/)
to achieve atomicity.

Since /var/setuid-wrappers is not a directory anymore, tmpfs mountpoints
were removed in installation scripts and in boot process.

Tested:

- upgrade /var/setuid-wrappers/ from folder to a symlink
- make sure /run/setuid-wrappers-dirs/ legacy symlink is really deleted
2016-09-01 20:57:51 +02:00
..
activation nixos filesystems: unify early filesystems handling 2016-08-27 13:38:20 +03:00
boot Fixes #18124: atomically replace /var/setuid-wrappers/ (#18186) 2016-09-01 20:57:51 +02:00
etc etc: remove obsolete directories 2016-07-25 15:50:53 +03:00