On Wed 02 Apr 2014 13:01:25 Samuli Suominen wrote:
> Problem 1:
> 
> https://bugs.gentoo.org/show_bug.cgi?id=472766#c21
> 
> I'm not sure if wildcards are supported by /etc/sandbox.d/ files

they are not.  however, path matching is based on prefixes, so there's always 
an implicit glob at the end.  would be reasonable to change the code to use 
fnmatch.

e.g. SANDBOX_PREDICT=/dev/dri/card probably works

however, i think we're relying on sandbox preventing bad code from doing bad 
things.  there really should be a way for the build to disable the logic in 
the first place from kicking in.
-mike

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to