From 9454e409b778b69739ca2c08c4c06fbc80a1b598 Mon Sep 17 00:00:00 2001
From: Daiderd Jordan <daiderd@gmail.com>
Date: Thu, 18 Jan 2018 00:12:38 +0100
Subject: [PATCH] checks: fail when db permissions are wrong

---
 modules/system/checks.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/modules/system/checks.nix b/modules/system/checks.nix
index ad20a31d..74bd44e4 100644
--- a/modules/system/checks.nix
+++ b/modules/system/checks.nix
@@ -119,6 +119,17 @@ let
         exit 2
     fi
   '';
+
+  nixStore = ''
+    if test -w /nix/var/nix/db -a ! -O /nix/store; then
+        echo >&2 "error: the store is not owned by this user, but /nix/var/nix/db is writable"
+        echo >&2 "If you are using the daemon:"
+        echo >&2
+        echo >&2 "    sudo chown -R /nix/var/nix/db"
+        echo >&2
+        exit 2
+    fi
+  '';
 in
 
 {
@@ -131,6 +142,7 @@ in
       ${darwinChanges}
       ${runLink}
       ${buildUsers}
+      ${nixStore}
       ${nixChannels}
       ${nixInstaller}
       ${nixPath}