diff options
| author | Kirill Elagin <kirelagin@gmail.com> | 2018-06-29 18:32:09 +0300 |
|---|---|---|
| committer | Kirill Elagin <kirelagin@gmail.com> | 2018-06-29 18:51:41 +0300 |
| commit | 26bab2fd3290b42a3df54db291f0d8775f128857 (patch) | |
| tree | d137f923e10336c2d4b0e865e0dbc080b3464731 /modules/system | |
| parent | 9f18c937710854768ea8d437fe92f5e5bee92a92 (diff) | |
installer and activation: Sanitise PATH
This makes sure that the installation and activation processes are “pure”,
i.e. they use only binaries from nixpkgs or ones that come with macOS.
Closes #86.
Diffstat (limited to 'modules/system')
| -rw-r--r-- | modules/system/activation-scripts.nix | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/modules/system/activation-scripts.nix b/modules/system/activation-scripts.nix index 25d84ec..1b99e4c 100644 --- a/modules/system/activation-scripts.nix +++ b/modules/system/activation-scripts.nix @@ -40,7 +40,7 @@ in #! ${stdenv.shell} set -e set -o pipefail - export PATH=${pkgs.coreutils}/bin:@out@/sw/bin:${config.environment.systemPath} + export PATH="${pkgs.gnugrep}/bin:${pkgs.coreutils}/bin:@out@/sw/bin:/usr/bin:/bin" systemConfig=@out@ @@ -83,7 +83,7 @@ in #! ${stdenv.shell} set -e set -o pipefail - export PATH=${pkgs.coreutils}/bin:@out@/sw/bin:${config.environment.systemPath} + export PATH="${pkgs.gnugrep}/bin:${pkgs.coreutils}/bin:@out@/sw/bin:/usr/bin:/bin" systemConfig=@out@ |