sys-devel/bc: add support for --sandbox & USE=forced-sandbox
authorMike Frysinger <vapier@chromium.org>
Mon, 17 Sep 2018 23:19:15 +0000 (19:19 -0400)
committerMike Frysinger <vapier@gentoo.org>
Mon, 17 Sep 2018 23:23:35 +0000 (19:23 -0400)
commite490601874fe785c7632e6571a3a1d8f43404622
tree3293daa43f9bfecd5dfb43a533ccc4e2c5a5926d
parent5eaabdd7b976bb5837a0f49663eeadeaae060695
sys-devel/bc: add support for --sandbox & USE=forced-sandbox

The dc tool has an ! command which allows for arbitrary system() calls
which is not ideal for processing arbitrary user scripts.  First add
support for a --sandbox flag at runtime (like sed/gawk gnu tools),
then add a USE=forced-sandbox option so people can lock it down.

The patches have been sent to upstream, but considering how slow the
bc project tends to move, and their lack of a project site/git repo,
going to merge this now and just wait for upstream feedback.
sys-devel/bc/bc-1.07.1-r2.ebuild [new file with mode: 0644]
sys-devel/bc/files/bc-1.07.1-sandbox.patch [new file with mode: 0644]
sys-devel/bc/metadata.xml