[Nix-dev] Re: [Nix-commits] SVN commit: nix - r23483 - in nix/branches/sqlite: scripts src/libstore src/libutil

[Lluís Batlle i Rossell]

Hep,

On Fri, Aug 27, 2010 at 04:11:36PM +0200, Eelco Dolstra wrote:
> > Could that be the path to request, for example, 'root' access in a build?
> 
> Maybe, but that would have obvious security implications :-)
Sure. But I thought that would be the only possible path.

> 
> > I think of the case where a nix derivation has to create an image (squashfs,
> > ubifs, ...) with devices, and only 'root' can run 'mknod'.
> 
> Note that mksquashfs allows device nodes to be specified on the command line or
> in a file, so you don't need to be root.
The kernel has a similar tool for cpio files.
I'll have to search for a similar feature for ubifs. Maybe it's there.

Thank you!