-
-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Can't have relative paths in NIX_PATH in restricted mode #5998
Labels
Comments
yveshauser
added a commit
to input-output-hk/marlowe-cardano
that referenced
this issue
Jan 26, 2022
shlevy
added a commit
to input-output-hk/marlowe-cardano
that referenced
this issue
Jan 27, 2022
Ack, this is worse than I thought:
Emphasizes that |
shlevy
added a commit
to input-output-hk/marlowe-cardano
that referenced
this issue
Jan 27, 2022
This fix is not enough, see NixOS/nix#5998 (comment) This reverts commit 6ec07ee.
shlevy
added a commit
to input-output-hk/marlowe-cardano
that referenced
this issue
Jan 27, 2022
Work around NixOS/nix#5998. Also clean up Nix config while we're at it
shlevy
added a commit
to input-output-hk/marlowe-cardano
that referenced
this issue
Jan 27, 2022
Work around NixOS/nix#5998. Also clean up Nix config while we're at it
jhbertra
pushed a commit
to input-output-hk/marlowe-cardano
that referenced
this issue
Jan 27, 2022
Work around NixOS/nix#5998. Also clean up Nix config while we're at it
13 tasks
Mic92
added a commit
to Mic92/nixpkgs
that referenced
this issue
Jan 30, 2022
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Since cbbd21e
This occurs even if, as in this case, the path lookup you perform is not found in the relative path you added.
The cause is that
realisePath
callscheckSourcePath
even ifrequireAbsolutePath = false
, and in restricted modecheckSourcePath
callscanonPath
, which checks for an absolute path.I suspect the best thing to do here is simply remove the
requireAbsolutePath
parameter altogether and not userealisePath
infindFile
, switching back torealiseContext
.The text was updated successfully, but these errors were encountered: