From c424352a0ae0fced8ede3bc278dbb6d7a33103a0 Mon Sep 17 00:00:00 2001 From: Justine Tunney Date: Mon, 10 Oct 2022 03:49:58 -0700 Subject: [PATCH] Disable make sandobxing unless .STRICT=1 This change makes Landlock Make backwards compatible. --- third_party/make/job.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/third_party/make/job.c b/third_party/make/job.c index aa98d54c9..caa11a68c 100644 --- a/third_party/make/job.c +++ b/third_party/make/job.c @@ -1908,7 +1908,9 @@ child_execute_job (struct childbase *child, (STRING_SIZE_TUPLE (".INTERNET"), c ? c->file : 0, "0")); - unsandboxed = parse_bool (get_target_variable + unsandboxed = !get_target_variable(STRING_SIZE_TUPLE (".STRICT"), + c->file, 0) || + parse_bool (get_target_variable (STRING_SIZE_TUPLE (".UNSANDBOXED"), c ? c->file : 0, "0"));