[llvm] f83de97 - [llvm][clang] Enable IO sandbox for assert builds (#171935)

[via llvm-commits]

Author: Jan Svoboda
Date: 2025-12-16T08:01:02-08:00
New Revision: f83de973a5daab2181442071d34758a0b413b6f2

URL: https://github.com/llvm/llvm-project/commit/f83de973a5daab2181442071d34758a0b413b6f2
DIFF: https://github.com/llvm/llvm-project/commit/f83de973a5daab2181442071d34758a0b413b6f2.diff

LOG: [llvm][clang] Enable IO sandbox for assert builds (#171935)

This PR enables the IO sandbox for supported tools (currently `clang
-cc1` and `clang -cc1as`) in assert builds. More details are in the RFC
here:
https://discourse.llvm.org/t/rfc-file-system-sandboxing-in-clang-llvm/88791

Added: 
    

Modified: 
    llvm/CMakeLists.txt

Removed: 
    


################################################################################
diff  --git a/llvm/CMakeLists.txt b/llvm/CMakeLists.txt
index 6d94cbbcd2559..c61c03a36bac5 100644
--- a/llvm/CMakeLists.txt
+++ b/llvm/CMakeLists.txt
@@ -704,7 +704,7 @@ else()
   option(LLVM_ENABLE_ASSERTIONS "Enable assertions" ON)
 endif()
 
-option(LLVM_ENABLE_IO_SANDBOX "Enable IO sandboxing in supported tools" OFF)
+option(LLVM_ENABLE_IO_SANDBOX "Enable IO sandboxing in supported tools" ${LLVM_ENABLE_ASSERTIONS})
 option(LLVM_ENABLE_EXPENSIVE_CHECKS "Enable expensive checks" OFF)
 
 set(LLVM_ABI_BREAKING_CHECKS "WITH_ASSERTS" CACHE STRING