diff options
| author | Lasse Collin <lasse.collin@tukaani.org> | 2024-02-17 23:07:35 +0200 |
|---|---|---|
| committer | Lasse Collin <lasse.collin@tukaani.org> | 2024-02-17 23:07:35 +0200 |
| commit | 374868d81d473ab56556a1cfd6b1b36a1fab348b (patch) | |
| tree | 195da6ba1f931c4ec7783832428ea3c2bbcac2b5 /src/xz/Makefile.am | |
| parent | xz: Tweak comments. (diff) | |
| download | xz-374868d81d473ab56556a1cfd6b1b36a1fab348b.tar.xz | |
xz: Move sandboxing code to sandbox.c and improve Landlock sandbox.
Landlock is now always used just like pledge(2) is: first in more
permissive mode and later (under certain common conditions) in
a strict mode that doesn't allow opening more files.
I put pledge(2) first in sandbox.c because it's the simplest API
to use and still somewhat fine-grained for basic applications.
So it's the simplest thing to understand for anyone reading sandbox.c.
Diffstat (limited to 'src/xz/Makefile.am')
| -rw-r--r-- | src/xz/Makefile.am | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/xz/Makefile.am b/src/xz/Makefile.am index 847405d7..4ff061f3 100644 --- a/src/xz/Makefile.am +++ b/src/xz/Makefile.am @@ -21,6 +21,8 @@ xz_SOURCES = \ options.c \ options.h \ private.h \ + sandbox.c \ + sandbox.h \ signals.c \ signals.h \ suffix.c \ |