Nix 2.24 is vulnerable to (remote) privilege escalation

Re:Nix 2.24 is vulnerable to (remote) privilege escalation by andrewchambers on Monday September 09, 2024 @08:53PM (#41496044)

It seems like a binary cache can already get root on your system - it is serving you binaries to run, often as root. Don't authorize a binary cache you don't trust.

[ Parent | on HN ]

Re:Nix 2.24 is vulnerable to (remote) privilege escalation by ElvishJerricco on Tuesday September 10, 2024 @12:02AM (#41497044)

The problem is that arbitrary users can cause nix to unpack arbitrary nars and edit arbitrary files that user shouldn't have permissions for. The system doesn't have to be configured to trust any particular binary cache. This is just straight up persistent privilege escalation, plain and simple.

[ Parent | on HN ]

Re:Nix 2.24 is vulnerable to (remote) privilege escalation by otabdeveloper4 on Tuesday September 10, 2024 @06:26AM (#41499293)

> It seems like a binary cache can already get root on your system

No, rootless Nix is pretty well supported.

[ Parent | on HN ]

Re:Nix 2.24 is vulnerable to (remote) privilege escalation by forgotpwd16 on Tuesday September 10, 2024 @08:41AM (#41500165)

Wondering how vulnerability applies outside NixOS. Does Nix outside NixOS also has such access over the system?

[ Parent | on HN ]