X-Git-Url: http://gitweb.michael.orlitzky.com/?a=blobdiff_plain;f=configure.ac;h=130b10c8a0539d1ed2be3c608099b25a60423bfe;hb=d806ef795948c87e614cb2a4cfb80ec96a07d256;hp=b3afe4a71a9fab78aaec1726f631977672e72332;hpb=7ce092ba47607098bb57695396357b8eab90e81b;p=apply-default-acl.git

diff --git a/configure.ac b/configure.ac
index b3afe4a..130b10c 100644
--- a/configure.ac
+++ b/configure.ac
@@ -18,9 +18,18 @@ AC_HEADER_STDC    # stdlib.h string.h (implied: errno.h limits.h stdio.h)
 AC_TYPE_MODE_T
 
 # Check for header files not covered by the predefined macros above.
-AC_CHECK_HEADERS([ fcntl.h ftw.h getopt.h libgen.h sys/acl.h sys/libacl.h ])
-AC_CHECK_HEADERS([ sys/types.h unistd.h ])
+AC_CHECK_HEADERS([ fcntl.h ftw.h getopt.h libgen.h limits.h sys/acl.h ])
+AC_CHECK_HEADERS([ sys/libacl.h sys/types.h unistd.h ])
 
-LT_INIT
+# We need openat() with O_NOFOLLOW from POSIX-2008. Without them, we
+# can't operate securely; I would rather refuse to be built.
+AC_CHECK_FUNC(openat,
+              [],
+	      AC_MSG_ERROR(missing required openat function))
+AC_CHECK_DECLS([O_NOFOLLOW],
+               [],
+	       [AC_MSG_ERROR(missing required O_NOFOLLOW flag in fcntl.h)],
+	       [[#include <fcntl.h>]])
 
+LT_INIT
 AC_OUTPUT