Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Installation doesn't work on multi-user computers #23904

Closed
1 of 4 tasks
Ten0 opened this issue May 21, 2024 · 3 comments
Closed
1 of 4 tasks

Installation doesn't work on multi-user computers #23904

Ten0 opened this issue May 21, 2024 · 3 comments
Assignees
Labels

Comments

@Ten0
Copy link

Ten0 commented May 21, 2024

Current Behavior

While attempting to install:

Error: EACCES: permission denied, mkdir '/tmp/nx-native-file-cache/7922ff398abcaa4ba02c132005c3f9a29c05714432c8da5d5607e32b0f2c7602'

This happens because the /tmp/nx-native-file-cache directory is owned by the first user that happens to have tried to install nx.

Expected Behavior

Doesn't use global static-path temporary files, thus allowing multiple users to have nx somewhere in their dependencies.
Also, one user shouldn't trust the file downloaded by another user, otherwise that would lead to privilege escalation security vulnerability (esp. since /tmp is world-writable), so the cache should not be shared between users.
Probably this can be fixed by appending the uid of the user to the path, or better yet storing to ~/.cache (if this is actually cache).

Steps to Reproduce

  1. install the lib on one user
  2. install the lib on another user

Package Manager Version

pnpm 8.15.5

Operating System

  • macOS
  • Linux
  • Windows
  • Other (Please specify)
@Ten0 Ten0 added the type: bug label May 21, 2024
@Ten0
Copy link
Author

Ten0 commented May 21, 2024

@FrozenPandaz FrozenPandaz added the scope: core core nx functionality label May 21, 2024
@Cammisuli
Copy link
Member

fixed by #24326

Copy link

This issue has been closed for more than 30 days. If this issue is still occuring, please open a new issue with more recent context.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jun 24, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

4 participants