Docs: Update --enable-sandbox option in INSTALL.

xzdec now also uses the sandbox when its configured.

diff --git a/INSTALL b/INSTALL
index 57f89cce3722e01b83b8dfb049f431f135211fb3..d6eaa616b207763e8b19ac9c01688c147e0dc35d 100644 (file)
--- a/INSTALL
+++ b/INSTALL
@@ -523,13 +523,16 @@ XZ Utils Installation
                 if any -fsanitize= option is specified in CFLAGS.
 
     --enable-sandbox=METHOD
-                There is limited sandboxing support in the xz tool. If
-                built with sandbox support, it's used automatically when
-                (de)compressing exactly one file to standard output and
-                the options --files or --files0 weren't used. This is a
-                common use case, for example, (de)compressing .tar.xz
-                files via GNU tar. The sandbox is also used for
-                single-file 'xz --test' or 'xz --list'.
+                There is limited sandboxing support in the xz and xzdec
+                tools. If built with sandbox support, xz uses it
+                automatically when (de)compressing exactly one file to
+                standard output when the options --files or --files0 aren't
+                used. This is a common use case, for example,
+                (de)compressing .tar.xz files via GNU tar. The sandbox is
+                also used for single-file 'xz --test' or 'xz --list'.
+                xzdec always uses the sandbox, except when more than one
+                file are decompressed. In this case it will enable the
+                sandbox for the last file that is decompressed.
 
                 Supported METHODs: