[clang] [llvm] [llvm][clang] Sandbox filesystem reads (PR #165350)

[Ben Langmuir via llvm-commits]

================
@@ -704,6 +704,7 @@ else()
   option(LLVM_ENABLE_ASSERTIONS "Enable assertions" ON)
 endif()
 
+option(LLVM_ENABLE_IO_SANDBOX "Enable IO sandboxing in supported tools" ON)
----------------
benlangmuir wrote:

I assume this should be `OFF` when you land the PR?

https://github.com/llvm/llvm-project/pull/165350