Subject: Re: bug#37744: Per-user profile directory hijack (CVE-2019-17365 for Nix)

From: "pelzflorian (Florian Pelz)" <[email-masked]>
Date: Wed, 16 Oct 2019 17:19:22 +0200

On Wed, Oct 16, 2019 at 05:16:47PM +0200, Tobias Geerinckx-Rice wrote:
> pelzflorian (Florian Pelz) 写道：
> > Why sudo guix pull?  It should be without sudo, am I wrong?
> 
> Guix on ‘foreign’ distributions uses the root profile for the daemon by
> default (i.e. in guix-daemon.service).
> 

Sorry for being imprecise.  I meant on Guix System.

Regards,
Florian