forked from OSchip/llvm-project
97fdea618e
Systems like FreeBSD's Capsicum and Nuxi CloudABI apply the concept of capability-based security on the way processes can interact with the filesystem API. It is no longer possible to interact with the VFS through calls like open(), unlink(), rename(), etc. Instead, processes are only allowed to interact with files and directories to which they have been granted access. The *at() functions can be used for this purpose. This change adds a new config switch called _LIBCPP_HAS_NO_GLOBAL_FILESYSTEM_NAMESPACE. If set, all functionality that requires the global filesystem namespace will be disabled. More concretely: - fstream's open() function will be removed. - cstdio will no longer pull in fopen(), rename(), etc. - The test suite's get_temp_file_name() will be removed. This will cause all tests that use the global filesystem namespace to break, but will at least make all the other tests run (as get_temp_file_name will not build anyway). It is important to mention that this change will make fstream rather useless on those systems for now. Still, I'd rather not have fstream disabled entirely, as it is of course possible to come up with an extension for fstream that would allow access to local filesystem namespaces (e.g., by adding an openat() member function). Differential revision: http://reviews.llvm.org/D8194 Reviewed by: jroelofs (thanks!) llvm-svn: 232049 |
||
|---|---|---|
| .. | ||
| Counter.h | ||
| DefaultOnly.h | ||
| MoveOnly.h | ||
| allocators.h | ||
| asan_testing.h | ||
| cmpxchg_loop.h | ||
| constexpr_char_traits.hpp | ||
| count_new.hpp | ||
| counting_predicates.hpp | ||
| hexfloat.h | ||
| min_allocator.h | ||
| nasty_containers.hpp | ||
| nasty_macros.hpp | ||
| nothing_to_do.pass.cpp | ||
| platform_support.h | ||
| private_constructor.hpp | ||
| test_allocator.h | ||
| test_iterators.h | ||
| tracked_value.h | ||
| user_defined_integral.hpp | ||