From 5b2cc72e1ba009352c0ed4905d3e6bb0326f04c2 Mon Sep 17 00:00:00 2001 From: Anders Kaseorg Date: Tue, 24 May 2022 22:01:49 -0700 Subject: pipewire: Never set an empty LD_LIBRARY_PATH An empty LD_LIBRARY_PATH may confuse some applications into appending :, creating an empty segment that insecurely refers to the current directory, not the absence of directories. Signed-off-by: Anders Kaseorg (cherry picked from commit 94fa5a951493937b4a401cd4cea7afba24c22e01) --- nixos/modules/services/desktops/pipewire/pipewire.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/modules/services/desktops/pipewire/pipewire.nix b/nixos/modules/services/desktops/pipewire/pipewire.nix index 1323336d866e..6459b22519db 100644 --- a/nixos/modules/services/desktops/pipewire/pipewire.nix +++ b/nixos/modules/services/desktops/pipewire/pipewire.nix @@ -239,7 +239,7 @@ in { }; environment.sessionVariables.LD_LIBRARY_PATH = - lib.optional cfg.jack.enable "${cfg.package.jack}/lib"; + lib.mkIf cfg.jack.enable [ "${cfg.package.jack}/lib" ]; users = lib.mkIf cfg.systemWide { users.pipewire = { -- cgit v1.2.3