Merge pull request #331576 from LeSuisse/env-vars-not-world-readable

stdenv: make sure the `env-vars` file created is not world readable
2024-08-05 00:33:37 +02:00
parent 9b6dc57012 c47a1e701d
commit 423c64a625
1 changed files with 1 additions and 1 deletions
@@ -1044,7 +1044,7 @@ substituteAllInPlace() {
 # the environment used for building.
 dumpVars() {
    if [ "${noDumpEnvVars:-0}" != 1 ]; then
-        export 2>/dev/null >| "$NIX_BUILD_TOP/env-vars" || true
+        install -m 0600 <(export 2>/dev/null) "$NIX_BUILD_TOP/env-vars" || true
    fi
 }