From 8e0f1af3dcaec00a3879cce8ad7441edc6359d1c Mon Sep 17 00:00:00 2001 From: Lasse Collin Date: Mon, 26 Dec 2016 20:50:25 +0200 Subject: [PATCH] Document --enable-sandbox configure option in INSTALL. --- INSTALL | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/INSTALL b/INSTALL index fb2b6d7c..dfcfbaaa 100644 --- a/INSTALL +++ b/INSTALL @@ -399,6 +399,31 @@ XZ Utils Installation calls any liblzma functions from more than one thread, something bad may happen. + --enable-sandbox=METHOD + This feature is EXPERIMENTAL in the XZ Utils 5.2.x and + disabled by default. + + There is limited sandboxing support in the xz tool. If + built with sandbox support, it's used automatically when + (de)compressing exactly one file to standard output and + the options --files or --files0 weren't used. This is a + common use case, for example, (de)compressing .tar.xz + files via GNU tar. The sandbox is also used for + single-file `xz --test' or `xz --list'. + + Supported METHODs: + + auto Look for a supported sandboxing method + and use it if found. If no method is + found, then sandboxing isn't used. + + no Disable sandboxing support. + + capsicum + Use Capsicum (FreeBSD >= 10) for + sandboxing. If no Capsicum support + is found, configure will give an error. + --enable-symbol-versions Use symbol versioning for liblzma. This is enabled by default on GNU/Linux, other GNU-based systems, and