From: Liliana Marie Prikler <liliana.prikler@gmail.com>
To: Rostislav Svoboda <rostislav.svoboda@gmail.com>, 70151@debbugs.gnu.org
Subject: [bug#70151] [PATCH] doc: Correct the "guix shell --container" example.
Date: Fri, 05 Apr 2024 06:07:40 +0200 [thread overview]
Message-ID: <97f6ec063bfee37c653862c28c93db8b77beb479.camel@gmail.com> (raw)
In-Reply-To: <95ccaa3fb35cdfbbd4097df3425f4bece79c71e8.1712080385.git.Rostislav.Svoboda@gmail.com>
Am Dienstag, dem 02.04.2024 um 19:53 +0200 schrieb Rostislav Svoboda:
> * doc/guix.texi (Invoking @command{guix shell}): Add missing
> parameters
> --preserve='^XAUTHORITY$' --expose=$XAUTHORITY and adjust
> corresponding
> textual description
>
> Change-Id: Ib99c81c107ff9784708ae807ec9b3ab93ad75603
> ---
> doc/guix.texi | 12 +++++++++---
> 1 file changed, 9 insertions(+), 3 deletions(-)
>
> diff --git a/doc/guix.texi b/doc/guix.texi
> index 69a904473c..14856027ca 100644
> --- a/doc/guix.texi
> +++ b/doc/guix.texi
> @@ -6268,12 +6268,18 @@ Invoking guix shell
> This @option{--container} option can also prove useful if you wish
> to
> run a security-sensitive application, such as a web browser, in an
> isolated environment. For example, the command below launches
> -Ungoogled-Chromium in an isolated environment, this time sharing
> network
> -access with the host and preserving its @code{DISPLAY} environment
> -variable, but without even sharing the current directory:
> +Ungoogled-Chromium in an isolated environment, which:
> +@itemize
> +@item shares network access with the host
> +@item inherits host's environment variables @code{DISPLAY} and
> @code{XAUTHORITY}
> +@item has access to host's authentication records from the
> @code{XAUTHORITY}
> +file
> +@item has no information about host's current directory
> +@end itemize
>
> @example
> guix shell --container --network --no-cwd ungoogled-chromium \
> + --preserve='^XAUTHORITY$' --expose=$XAUTHORITY \
Shell injection says "/run/user/$USER/gdm/Xauthority -- oops that
shouldn't happen".
Cheers
next prev parent reply other threads:[~2024-04-05 4:08 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-04-02 17:53 [bug#70151] [PATCH] doc: Correct the "guix shell --container" example Rostislav Svoboda
2024-04-05 4:07 ` Liliana Marie Prikler [this message]
2024-04-05 9:47 ` Rostislav Svoboda
2024-04-05 13:07 ` Liliana Marie Prikler
2024-04-08 11:34 ` Rostislav Svoboda
2024-04-20 8:56 ` bug#70151: " Liliana Marie Prikler
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=97f6ec063bfee37c653862c28c93db8b77beb479.camel@gmail.com \
--to=liliana.prikler@gmail.com \
--cc=70151@debbugs.gnu.org \
--cc=rostislav.svoboda@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/guix.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.