40 lines
1.5 KiB
XML
40 lines
1.5 KiB
XML
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
version="5.0"
|
|
xml:id="ssec-relnotes-1.4">
|
|
|
|
<title>Release 1.4 (2013-02-26)</title>
|
|
|
|
<para>This release fixes a security bug in multi-user operation. It
|
|
was possible for derivations to cause the mode of files outside of the
|
|
Nix store to be changed to 444 (read-only but world-readable) by
|
|
creating hard links to those files (<link
|
|
xlink:href="https://github.com/NixOS/nix/commit/5526a282b5b44e9296e61e07d7d2626a79141ac4">details</link>).</para>
|
|
|
|
<para>There are also the following improvements:</para>
|
|
|
|
<itemizedlist>
|
|
|
|
<listitem><para>New built-in function:
|
|
<function>builtins.hashString</function>.</para></listitem>
|
|
|
|
<listitem><para>Build logs are now stored in
|
|
<filename>/nix/var/log/nix/drvs/<replaceable>XX</replaceable>/</filename>,
|
|
where <replaceable>XX</replaceable> is the first two characters of
|
|
the derivation. This is useful on machines that keep a lot of build
|
|
logs (such as Hydra servers).</para></listitem>
|
|
|
|
<listitem><para>The function <function>corepkgs/fetchurl</function>
|
|
can now make the downloaded file executable. This will allow
|
|
getting rid of all bootstrap binaries in the Nixpkgs source
|
|
tree.</para></listitem>
|
|
|
|
<listitem><para>Language change: The expression <literal>"${./path}
|
|
..."</literal> now evaluates to a string instead of a
|
|
path.</para></listitem>
|
|
|
|
</itemizedlist>
|
|
|
|
</section>
|