diff options
| author |   Mike Frysinger <vapier@chromium.org> | 2018-03-05 13:10:17 -0500 |
|---|---|---|
| committer |   Mike Frysinger <vapier@gentoo.org> | 2018-03-05 13:32:18 -0500 |
| commit | 0a3af690b27f38bcce7b11f5888cc20ef24009eb (patch) | |
| tree | a65950f805bf6dcd4c7a428c63b411b063dc1e3e /sys-apps/gawk/metadata.xml | |
| parent | sys-apps/systemd: backports from v237-stable branch (diff) | |
| download | gentoo-0a3af690b27f38bcce7b11f5888cc20ef24009eb.tar.gz gentoo-0a3af690b27f38bcce7b11f5888cc20ef24009eb.tar.bz2 gentoo-0a3af690b27f38bcce7b11f5888cc20ef24009eb.zip | |
sys-apps/gawk: add USE=forced-sandbox to always enable --sandbox
For building locked down systems, it's nice to be able to force all
awk scripts into a sane/secure mode.
Diffstat (limited to 'sys-apps/gawk/metadata.xml')
| -rw-r--r-- | sys-apps/gawk/metadata.xml | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys-apps/gawk/metadata.xml b/sys-apps/gawk/metadata.xml index 3fa1f9889991..58cec04bdcb0 100644 --- a/sys-apps/gawk/metadata.xml +++ b/sys-apps/gawk/metadata.xml @@ -6,6 +6,7 @@ <name>Gentoo Base System</name> </maintainer> <use> + <flag name="forced-sandbox">Always enable --sandbox mode for simpler/secure runtime (disables e/r/w commands)</flag> <flag name="mpfr">use mpfr for high precision arithmetic (-M / --bignum)</flag> </use> </pkgmetadata> |