diff options
| author |   Mike Frysinger <vapier@chromium.org> | 2018-03-05 13:28:50 -0500 |
|---|---|---|
| committer |   Mike Frysinger <vapier@gentoo.org> | 2018-03-05 13:32:18 -0500 |
| commit | 61acdcd13e97339d20c3058a211ee5599831748d (patch) | |
| tree | 7854a75856d3c898a8ea698799875e1ed7e2936b /sys-apps/sed/metadata.xml | |
| parent | sys-apps/gawk: add USE=forced-sandbox to always enable --sandbox (diff) | |
| download | gentoo-61acdcd13e97339d20c3058a211ee5599831748d.tar.gz gentoo-61acdcd13e97339d20c3058a211ee5599831748d.tar.bz2 gentoo-61acdcd13e97339d20c3058a211ee5599831748d.zip | |
sys-apps/sed: add USE=forced-sandbox to always enable --sandbox
For building locked down systems, it's nice to be able to force all
awk scripts into a sane/secure mode.
Diffstat (limited to 'sys-apps/sed/metadata.xml')
| -rw-r--r-- | sys-apps/sed/metadata.xml | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sys-apps/sed/metadata.xml b/sys-apps/sed/metadata.xml index b738f8c54a01..ea2a7bdbf75c 100644 --- a/sys-apps/sed/metadata.xml +++ b/sys-apps/sed/metadata.xml @@ -8,4 +8,7 @@ <upstream> <remote-id type="sourceforge">sed</remote-id> </upstream> +<use> + <flag name="forced-sandbox">Always enable --sandbox mode for simpler/secure runtime (disables e/r/w commands)</flag> +</use> </pkgmetadata> |