about summary refs log tree commit diff
path: root/pkgs/tools/package-management/nix-serve
diff options
context:
space:
mode:
authorJörg Thalheim <joerg@thalheim.io>2020-12-12 09:29:40 +0100
committerJörg Thalheim <joerg@thalheim.io>2021-07-18 08:51:17 +0200
commitac7b8724b59974c0d74f2feacc4a2a787a5cf122 (patch)
tree054235c04fe0a7e21a78d187a90dd49a5c41cf95 /pkgs/tools/package-management/nix-serve
parent2489eb5e4516aab575ab114b7e0a3e1b5c5daca7 (diff)
nixos/nix-serve: don't run as nogroup
nogroup is insecure if shared
Diffstat (limited to 'pkgs/tools/package-management/nix-serve')
-rw-r--r--pkgs/tools/package-management/nix-serve/default.nix12
1 files changed, 10 insertions, 2 deletions
diff --git a/pkgs/tools/package-management/nix-serve/default.nix b/pkgs/tools/package-management/nix-serve/default.nix
index f85adee4917f7..a1edfdd1367ff 100644
--- a/pkgs/tools/package-management/nix-serve/default.nix
+++ b/pkgs/tools/package-management/nix-serve/default.nix
@@ -1,5 +1,11 @@
-{ lib, stdenv, fetchFromGitHub,
-  bzip2, nix, perl, makeWrapper,
+{ lib
+, stdenv
+, fetchFromGitHub
+, bzip2
+, nix
+, perl
+, makeWrapper
+, nixosTests
 }:
 
 with lib;
@@ -30,6 +36,8 @@ stdenv.mkDerivation {
                 --add-flags $out/libexec/nix-serve/nix-serve.psgi
   '';
 
+  passthru.tests.nix-serve = nixosTests.nix-serve;
+
   meta = {
     homepage = "https://github.com/edolstra/nix-serve";
     description = "A utility for sharing a Nix store as a binary cache";