From b362ef4eff67d5a57a87e47290b8d02e24772663 Mon Sep 17 00:00:00 2001 From: Anders Kaseorg Date: Tue, 24 May 2022 22:01:49 -0700 Subject: pipewire: Never set an empty LD_LIBRARY_PATH An empty LD_LIBRARY_PATH may confuse some applications into appending :, creating an empty segment that insecurely refers to the current directory, not the absence of directories. Signed-off-by: Anders Kaseorg --- nixos/modules/services/desktops/pipewire/pipewire.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'nixos') diff --git a/nixos/modules/services/desktops/pipewire/pipewire.nix b/nixos/modules/services/desktops/pipewire/pipewire.nix index 1323336d866e9..6459b22519dbe 100644 --- a/nixos/modules/services/desktops/pipewire/pipewire.nix +++ b/nixos/modules/services/desktops/pipewire/pipewire.nix @@ -239,7 +239,7 @@ in { }; environment.sessionVariables.LD_LIBRARY_PATH = - lib.optional cfg.jack.enable "${cfg.package.jack}/lib"; + lib.mkIf cfg.jack.enable [ "${cfg.package.jack}/lib" ]; users = lib.mkIf cfg.systemWide { users.pipewire = { -- cgit 1.4.1