diff options
| author |   Georgy Yakovlev <gyakovlev@gentoo.org> | 2020-08-30 14:08:22 -0700 |
|---|---|---|
| committer | Georgy Yakovlev <gyakovlev@gentoo.org> | 2020-08-30 14:10:00 -0700 |
| commit | d5370bc17d73a62f1a3f1bc09b4c7847da507317 (patch) | |
| tree | 9ecacf18611e04c1361846f0a887ef4fb928686a /profiles/base | |
| parent | net-misc/chrony: Stabilize 3.5.1-r1 amd64, #738154 (diff) | |
| download | gentoo-d5370bc17d73a62f1a3f1bc09b4c7847da507317.tar.gz gentoo-d5370bc17d73a62f1a3f1bc09b4c7847da507317.tar.bz2 gentoo-d5370bc17d73a62f1a3f1bc09b4c7847da507317.zip | |
profiles/base/make.defaults: add CARGO_HOME to ENV_UNSET
Signed-off-by: Georgy Yakovlev <gyakovlev@gentoo.org>
Diffstat (limited to 'profiles/base')
| -rw-r--r-- | profiles/base/make.defaults | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/profiles/base/make.defaults b/profiles/base/make.defaults index 1ac69f51ec90..ebcbbe0ad388 100644 --- a/profiles/base/make.defaults +++ b/profiles/base/make.defaults @@ -29,6 +29,9 @@ CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf" # # DISPLAY and XAUTHORITY to avoid trying to access the user's X11. # +# CARGO_HOME may leak to build env if package is not using cargo.eclass +# such leak will result in sandbox violations +# # XDG_* since the values coming from user environment can collide with # ebuild-set ${HOME} (e.g. by referring to user's home directory). # We exclude XDG_DATA_DIRS & XDG_CONFIG_DIRS as those are set in env.d. @@ -40,7 +43,7 @@ CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf" # GOBIN needs to be cleaned as random values in GOBIN can affect the # building of some packages: # https://archives.gentoo.org/gentoo-dev/message/163010f83ae7819d80c0cfdf797cbfe0 -ENV_UNSET="DBUS_SESSION_BUS_ADDRESS DISPLAY XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR PERL_MM_OPT PERL5LIB PERL5OPT PERL_MB_OPT PERL_CORE PERLPREFIX GOBIN GOPATH" +ENV_UNSET="DBUS_SESSION_BUS_ADDRESS DISPLAY CARGO_HOME XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR PERL_MM_OPT PERL5LIB PERL5OPT PERL_MB_OPT PERL_CORE PERLPREFIX GOBIN GOPATH" # Variables that are set exclusively by the profile # and not by user configuration files. |