about summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorAnders Kaseorg <andersk@mit.edu>2022-05-24 22:01:49 -0700
committerBjørn Forsman <bjorn.forsman@gmail.com>2022-06-05 13:34:35 +0200
commitb362ef4eff67d5a57a87e47290b8d02e24772663 (patch)
treee4f403b0df7a8ef4f071397c6bad364ae361ef59 /nixos
parent2db97cb047fb7c6e5193869bf9a511241bf52523 (diff)
pipewire: Never set an empty LD_LIBRARY_PATH
An empty LD_LIBRARY_PATH may confuse some applications into appending
:, creating an empty segment that insecurely refers to the current
directory, not the absence of directories.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/services/desktops/pipewire/pipewire.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/desktops/pipewire/pipewire.nix b/nixos/modules/services/desktops/pipewire/pipewire.nix
index 1323336d866e9..6459b22519dbe 100644
--- a/nixos/modules/services/desktops/pipewire/pipewire.nix
+++ b/nixos/modules/services/desktops/pipewire/pipewire.nix
@@ -239,7 +239,7 @@ in {
     };
 
     environment.sessionVariables.LD_LIBRARY_PATH =
-      lib.optional cfg.jack.enable "${cfg.package.jack}/lib";
+      lib.mkIf cfg.jack.enable [ "${cfg.package.jack}/lib" ];
 
     users = lib.mkIf cfg.systemWide {
       users.pipewire = {