]> git.ipfire.org Git - thirdparty/dhcpcd.git/commitdiff
privsep: Enable privsep by default
authorRoy Marples <roy@marples.name>
Sun, 1 Dec 2019 22:09:18 +0000 (22:09 +0000)
committerRoy Marples <roy@marples.name>
Sun, 1 Dec 2019 22:09:18 +0000 (22:09 +0000)
Except on Solaris where it's not expected to work.

configure

index 9cea44b4151931b9b3e7776a4c851b06e5d7de2b..a373f2bc448a051dfc6ee5ba880033527764f9be 100755 (executable)
--- a/configure
+++ b/configure
@@ -527,9 +527,16 @@ if [ -z "$AUTH" -o "$AUTH" = yes ]; then
        echo "SRCS+=            auth.c" >>$CONFIG_MK
 fi
 
+if [ -z "$PRIVSEP" ]; then
+       # priviledge separation works fine .... except on Solaris
+       case "$OS" in
+       solaris*|sunos*)        PRIVSEP=no;;
+       *)                      PRIVSEP=yes;;
+       esac
+fi
+
 if [ "$PRIVSEP" = yes ]; then
        echo "Enabling Priviledge Separation"
-       echo "WARNING: This is an experimental feature"
        echo "CPPFLAGS+=        -DPRIVSEP" >>$CONFIG_MK
        echo "DHCPCD_SRCS+=     privsep.c privsep-root.c privsep-inet.c" \
                >>$CONFIG_MK