[llvm] [llvm][clang] Enable IO sandbox for assert builds (PR #171935)

[Jan Svoboda via llvm-commits]

https://github.com/jansvoboda11 created https://github.com/llvm/llvm-project/pull/171935

This PR enables the IO sandbox for supported tools (currently `clang -cc1` and `clang -cc1as`) in assert builds. More details are in the RFC here: https://discourse.llvm.org/t/rfc-file-system-sandboxing-in-clang-llvm/88791

>From ec749ce970b752593e3df734829b0a981c1d9be5 Mon Sep 17 00:00:00 2001
From: Jan Svoboda <jan_svoboda at apple.com>
Date: Thu, 11 Dec 2025 16:02:31 -0800
Subject: [PATCH] [llvm][clang] Enable IO sandbox for assert builds

---
 llvm/CMakeLists.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/llvm/CMakeLists.txt b/llvm/CMakeLists.txt
index 6d94cbbcd2559..c61c03a36bac5 100644
--- a/llvm/CMakeLists.txt
+++ b/llvm/CMakeLists.txt
@@ -704,7 +704,7 @@ else()
   option(LLVM_ENABLE_ASSERTIONS "Enable assertions" ON)
 endif()
 
-option(LLVM_ENABLE_IO_SANDBOX "Enable IO sandboxing in supported tools" OFF)
+option(LLVM_ENABLE_IO_SANDBOX "Enable IO sandboxing in supported tools" ${LLVM_ENABLE_ASSERTIONS})
 option(LLVM_ENABLE_EXPENSIVE_CHECKS "Enable expensive checks" OFF)
 
 set(LLVM_ABI_BREAKING_CHECKS "WITH_ASSERTS" CACHE STRING