You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This happens because the /tmp/nx-native-file-cache directory is owned by the first user that happens to have tried to install nx.
Expected Behavior
Doesn't use global static-path temporary files, thus allowing multiple users to have nx somewhere in their dependencies.
Also, one user shouldn't trust the file downloaded by another user, otherwise that would lead to privilege escalation security vulnerability (esp. since /tmp is world-writable), so the cache should not be shared between users.
Probably this can be fixed by appending the uid of the user to the path, or better yet storing to ~/.cache (if this is actually cache).
Steps to Reproduce
install the lib on one user
install the lib on another user
Package Manager Version
pnpm 8.15.5
Operating System
macOS
Linux
Windows
Other (Please specify)
The text was updated successfully, but these errors were encountered:
Current Behavior
While attempting to install:
This happens because the
/tmp/nx-native-file-cache
directory is owned by the first user that happens to have tried to installnx
.Expected Behavior
Doesn't use global static-path temporary files, thus allowing multiple users to have nx somewhere in their dependencies.
Also, one user shouldn't trust the file downloaded by another user, otherwise that would lead to privilege escalation security vulnerability (esp. since
/tmp
is world-writable), so the cache should not be shared between users.Probably this can be fixed by appending the uid of the user to the path, or better yet storing to
~/.cache
(if this is actually cache).Steps to Reproduce
Package Manager Version
pnpm 8.15.5
Operating System
The text was updated successfully, but these errors were encountered: