Disable make sandobxing unless .STRICT=1

This change makes Landlock Make backwards compatible.
This commit is contained in:
Justine Tunney 2022-10-10 03:49:58 -07:00
parent d5910e2673
commit c424352a0a
No known key found for this signature in database
GPG key ID: BE714B4575D6E328

View file

@ -1908,7 +1908,9 @@ child_execute_job (struct childbase *child,
(STRING_SIZE_TUPLE (".INTERNET"), (STRING_SIZE_TUPLE (".INTERNET"),
c ? c->file : 0, "0")); c ? c->file : 0, "0"));
unsandboxed = parse_bool (get_target_variable unsandboxed = !get_target_variable(STRING_SIZE_TUPLE (".STRICT"),
c->file, 0) ||
parse_bool (get_target_variable
(STRING_SIZE_TUPLE (".UNSANDBOXED"), (STRING_SIZE_TUPLE (".UNSANDBOXED"),
c ? c->file : 0, "0")); c ? c->file : 0, "0"));