[tracnar]

What actually happens if you remove read permissions on the /nix/store directory? Do things still work? I suppose I'll need to try!

[kevincox]

https://github.com/NixOS/rfcs/blob/master/rfcs/0097-no-read-... is relevant.

[Ericson2314]

Oh hmm did we never implement this? We should. Both because it is a good idea, and because accepted RFCs should be implemented.

[kevincox]

I'm not aware of it being done yet. But since the RFC is accepted it should be pretty straightforward.