Gentoo Archives: gentoo-dev

From: Mike Frysinger <vapier@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Solving OpenCL /dev/dri/card* sandbox issues w/ ImageMagick
Date: Wed, 02 Apr 2014 13:01:50
Message-Id: 3629249.GRyOgpvO8H@vapier
In Reply to: [gentoo-dev] Solving OpenCL /dev/dri/card* sandbox issues w/ ImageMagick by Samuli Suominen
1 On Wed 02 Apr 2014 13:01:25 Samuli Suominen wrote:
2 > Problem 1:
3 >
4 >
5 >
6 > I'm not sure if wildcards are supported by /etc/sandbox.d/ files
8 they are not. however, path matching is based on prefixes, so there's always
9 an implicit glob at the end. would be reasonable to change the code to use
10 fnmatch.
12 e.g. SANDBOX_PREDICT=/dev/dri/card probably works
14 however, i think we're relying on sandbox preventing bad code from doing bad
15 things. there really should be a way for the build to disable the logic in
16 the first place from kicking in.
17 -mike


File name MIME type
signature.asc application/pgp-signature