On 12/12/18 9:37 AM, Michał Górny wrote: > The sandboxes are stable enough to be enabled by default, and they all > prevent undesirable situations. Furthermore, they all gracefully handle > missing namespace support. > --- > cnf/make.globals | 9 +++++---- > 1 file changed, 5 insertions(+), 4 deletions(-) > > diff --git a/cnf/make.globals b/cnf/make.globals > index d394a1890..1bcc7ce64 100644 > --- a/cnf/make.globals > +++ b/cnf/make.globals > @@ -52,10 +52,11 @@ FETCHCOMMAND_SFTP="bash -c \"x=\\\${2#sftp://} ; > host=\\\${x%%/*} ; port=\\\${ho > # Default user options > FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs > config-protect-if-modified distlocks ebuild-locks > - fixlafiles merge-sync multilib-strict news > - parallel-fetch preserve-libs protect-owned > - sandbox sfperms strict unknown-features-warn unmerge-logs > - unmerge-orphans userfetch userpriv usersandbox usersync" > + fixlafiles ipc-sandbox merge-sync multilib-strict > + network-sandbox news parallel-fetch pid-sandbox > + preserve-libs protect-owned sandbox sfperms strict > + unknown-features-warn unmerge-logs unmerge-orphans userfetch > + userpriv usersandbox usersync" > > # Ignore file collisions in /lib/modules since files inside this directory > # are never unmerged, and therefore collisions must be ignored in order for >
Looks good, please merge. -- Thanks, Zac
signature.asc
Description: OpenPGP digital signature