Docs: Update --enable-sandbox option in INSTALL.

xzdec now also uses the sandbox when its configured.
This commit is contained in:
Jia Tan 2023-12-20 22:19:19 +08:00
parent ebddf20214
commit 4e1c695676
1 changed files with 10 additions and 7 deletions

17
INSTALL
View File

@ -523,13 +523,16 @@ XZ Utils Installation
if any -fsanitize= option is specified in CFLAGS. if any -fsanitize= option is specified in CFLAGS.
--enable-sandbox=METHOD --enable-sandbox=METHOD
There is limited sandboxing support in the xz tool. If There is limited sandboxing support in the xz and xzdec
built with sandbox support, it's used automatically when tools. If built with sandbox support, xz uses it
(de)compressing exactly one file to standard output and automatically when (de)compressing exactly one file to
the options --files or --files0 weren't used. This is a standard output when the options --files or --files0 aren't
common use case, for example, (de)compressing .tar.xz used. This is a common use case, for example,
files via GNU tar. The sandbox is also used for (de)compressing .tar.xz files via GNU tar. The sandbox is
single-file 'xz --test' or 'xz --list'. also used for single-file 'xz --test' or 'xz --list'.
xzdec always uses the sandbox, except when more than one
file are decompressed. In this case it will enable the
sandbox for the last file that is decompressed.
Supported METHODs: Supported METHODs: