aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLasse Collin <lasse.collin@tukaani.org>2020-02-05 19:56:09 +0200
committerLasse Collin <lasse.collin@tukaani.org>2020-02-05 20:21:56 +0200
commit609c7067859146ffc62ac655f6ba53599c891801 (patch)
treefd9e9aa560e86faf16afb1d9419e04284638ca15
parentRename unaligned_read32ne to read32ne, and similarly for the others. (diff)
downloadxz-609c7067859146ffc62ac655f6ba53599c891801.tar.xz
xz: Enable Capsicum sandboxing by default if available.
It has been enabled in FreeBSD for a while and reported to work fine. Thanks to Xin Li.
Diffstat (limited to '')
-rw-r--r--INSTALL6
-rw-r--r--configure.ac8
2 files changed, 4 insertions, 10 deletions
diff --git a/INSTALL b/INSTALL
index 2321dabf..e0df3f4a 100644
--- a/INSTALL
+++ b/INSTALL
@@ -403,12 +403,6 @@ XZ Utils Installation
one thread, something bad may happen.
--enable-sandbox=METHOD
- This feature is EXPERIMENTAL in the XZ Utils 5.2.x and
- disabled by default. If you test this, look especially
- if message translations and locale-specific decimal and
- thousand separators (e.g. xz --list foo.xz) work the
- same way as they do without sandboxing.
-
There is limited sandboxing support in the xz tool. If
built with sandbox support, it's used automatically when
(de)compressing exactly one file to standard output and
diff --git a/configure.ac b/configure.ac
index 63afd8c2..d14fa40d 100644
--- a/configure.ac
+++ b/configure.ac
@@ -498,10 +498,10 @@ AM_CONDITIONAL([COND_SYMVERS], [test "x$enable_symbol_versions" = xyes])
AC_MSG_CHECKING([if sandboxing should be used])
AC_ARG_ENABLE([sandbox], [AS_HELP_STRING([--enable-sandbox=METHOD],
- [This is an experimental feature.
- Sandboxing METHOD can be `auto', `no', or `capsicum'.
- The default is `no'.])],
- [], [enable_sandbox=no])
+ [Sandboxing METHOD can be `auto', `no', or `capsicum'.
+ The default is `auto' which enables sandboxing if
+ a supported sandboxing method is found.])],
+ [], [enable_sandbox=auto])
case $enable_sandbox in
auto)
AC_MSG_RESULT([maybe (autodetect)])