mirror of https://github.com/omar-polo/gmid.git
configure: add --disable-sandbox
Calling `configure' with --disable-sandbox will disable the sandbox support *completely* at compile time. gmid will still complain at compile time and during the startup. Users shouldn't disable the sandbox if possible, but instead report problem upstream so they get fixed (hopefully.) #4 related
This commit is contained in:
parent
137def5ff4
commit
8bb8cf2ad4
|
@ -43,6 +43,8 @@ LD_IMSG=
|
||||||
STATIC=
|
STATIC=
|
||||||
YACC=yacc
|
YACC=yacc
|
||||||
|
|
||||||
|
DISABLE_SANDBOX=0
|
||||||
|
|
||||||
NEED_GNU_SOURCE=0
|
NEED_GNU_SOURCE=0
|
||||||
NEED_OPENBSD_SOURCE=0
|
NEED_OPENBSD_SOURCE=0
|
||||||
|
|
||||||
|
@ -88,6 +90,11 @@ which ${YACC} 2>/dev/null 1>&2 || {
|
||||||
# allow certain variables to be overridden on the command line
|
# allow certain variables to be overridden on the command line
|
||||||
|
|
||||||
for keyvals in "$@"; do
|
for keyvals in "$@"; do
|
||||||
|
if [ "$keyvals" = "--disable-sandbox" ]; then
|
||||||
|
DISABLE_SANDBOX=1
|
||||||
|
continue
|
||||||
|
fi
|
||||||
|
|
||||||
key=`echo $keyvals | cut -s -d '=' -f1`
|
key=`echo $keyvals | cut -s -d '=' -f1`
|
||||||
if [ -z "$key" ]; then
|
if [ -z "$key" ]; then
|
||||||
echo "$0: invalid key-value: $keyvals" 1>&2
|
echo "$0: invalid key-value: $keyvals" 1>&2
|
||||||
|
@ -275,6 +282,8 @@ echo "#include <imsg.h>"
|
||||||
|
|
||||||
cat <<__HEREDOC__
|
cat <<__HEREDOC__
|
||||||
|
|
||||||
|
#define DISABLE_SANDBOX ${DISABLE_SANDBOX}
|
||||||
|
|
||||||
#define HAVE_ERR ${HAVE_ERR}
|
#define HAVE_ERR ${HAVE_ERR}
|
||||||
#define HAVE_EXPLICIT_BZERO ${HAVE_EXPLICIT_BZERO}
|
#define HAVE_EXPLICIT_BZERO ${HAVE_EXPLICIT_BZERO}
|
||||||
#define HAVE_FREEZERO ${HAVE_FREEZERO}
|
#define HAVE_FREEZERO ${HAVE_FREEZERO}
|
||||||
|
|
25
sandbox.c
25
sandbox.c
|
@ -16,7 +16,30 @@
|
||||||
|
|
||||||
#include "gmid.h"
|
#include "gmid.h"
|
||||||
|
|
||||||
#if defined(__FreeBSD__)
|
#if DISABLE_SANDBOX
|
||||||
|
|
||||||
|
#warning "Sandbox disabled! Please report issues upstream instead of disabling the sandbox."
|
||||||
|
|
||||||
|
void
|
||||||
|
sandbox_server_process(void)
|
||||||
|
{
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
void
|
||||||
|
sandbox_executor_process(void)
|
||||||
|
{
|
||||||
|
log_notice(NULL, "Sandbox disabled! "
|
||||||
|
"Please report issues upstream instead of disabling the sandbox.");
|
||||||
|
}
|
||||||
|
|
||||||
|
void
|
||||||
|
sandbox_logger_process(void)
|
||||||
|
{
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
#elif defined(__FreeBSD__)
|
||||||
|
|
||||||
#include <sys/capsicum.h>
|
#include <sys/capsicum.h>
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue