7994fd1d54
git-subtree-dir: third_party/nix
git-subtree-mainline: cf8cd640c1
git-subtree-split: be66c7a6b24e3c3c6157fd37b86c7203d14acf10
27 lines
No EOL
1.1 KiB
XML
27 lines
No EOL
1.1 KiB
XML
<chapter xmlns="http://docbook.org/ns/docbook"
|
||
xmlns:xlink="http://www.w3.org/1999/xlink"
|
||
xmlns:xi="http://www.w3.org/2001/XInclude"
|
||
version="5.0"
|
||
xml:id="ch-nix-security">
|
||
|
||
<title>Security</title>
|
||
|
||
<para>Nix has two basic security models. First, it can be used in
|
||
“single-user mode”, which is similar to what most other package
|
||
management tools do: there is a single user (typically <systemitem
|
||
class="username">root</systemitem>) who performs all package
|
||
management operations. All other users can then use the installed
|
||
packages, but they cannot perform package management operations
|
||
themselves.</para>
|
||
|
||
<para>Alternatively, you can configure Nix in “multi-user mode”. In
|
||
this model, all users can perform package management operations — for
|
||
instance, every user can install software without requiring root
|
||
privileges. Nix ensures that this is secure. For instance, it’s not
|
||
possible for one user to overwrite a package used by another user with
|
||
a Trojan horse.</para>
|
||
|
||
<xi:include href="single-user.xml" />
|
||
<xi:include href="multi-user.xml" />
|
||
|
||
</chapter> |