From: Roy Marples <roy@marples.name>
Date: Sun, 1 Dec 2019 22:09:18 +0000 (+0000)
Subject: privsep: Enable privsep by default
X-Git-Tag: v9.0.0~186
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8a7aa9822d71d4e2755cff3c151ec4f9df3bb83e;p=thirdparty%2Fdhcpcd.git

privsep: Enable privsep by default

Except on Solaris where it's not expected to work.
---

diff --git a/configure b/configure
index 9cea44b4..a373f2bc 100755
--- a/configure
+++ b/configure
@@ -527,9 +527,16 @@ if [ -z "$AUTH" -o "$AUTH" = yes ]; then
 	echo "SRCS+=		auth.c" >>$CONFIG_MK
 fi
 
+if [ -z "$PRIVSEP" ]; then
+	# priviledge separation works fine .... except on Solaris
+	case "$OS" in
+	solaris*|sunos*)	PRIVSEP=no;;
+	*)			PRIVSEP=yes;;
+	esac
+fi
+
 if [ "$PRIVSEP" = yes ]; then
 	echo "Enabling Priviledge Separation"
-	echo "WARNING: This is an experimental feature"
 	echo "CPPFLAGS+=	-DPRIVSEP" >>$CONFIG_MK
 	echo "DHCPCD_SRCS+=	privsep.c privsep-root.c privsep-inet.c" \
 		>>$CONFIG_MK