W dniu czw, 21.09.2017 o godzinie 15∶41 -0700, użytkownik Matt Turner napisał: > On Thu, Sep 21, 2017 at 2:25 PM, Michał Górny <mgo...@gentoo.org> wrote: > > Given that sandbox is utterly broken by design, I don't really want to > > put too much effort in trying to make it a little better. I'd rather put > > the minimal effort required to make it not-much-worse. > > You said in your initial email that you weren't an expert in its > internals, but here you say it's broken by design. Why do you think > that? >
Because it uses LD_PRELOAD which is a huge hack and which causes guaranteed issues we can't really fix. All we can do is disable it for emacs, for compiler-rt and I'm afraid this list will grow because overriding random library functions is never a good idea. -- Best regards, Michał Górny