libadacl.c: use O_PATH in safe_open() for added safety.

[apply-default-acl.git] / configure.ac

diff --git a/configure.ac b/configure.ac
index dd028ff0a34ba6a95c8dcbee4850947eb4859915..c9abffe2ddf21acb9769e734e58d80ba3bee6a3e 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -1,9 +1,6 @@
-#                                               -*- Autoconf -*-
-# Process this file with autoconf to produce a configure script.
-
 AC_PREREQ([2.68])
-AC_INIT([apply-default-acl], [0.0.6], [michael@orlitzky.com])
-AM_INIT_AUTOMAKE([foreign]) # don't bug me a bout README, NEWS, etc.
+AC_INIT([apply-default-acl], [0.1.3], [michael@orlitzky.com])
+AM_INIT_AUTOMAKE([-Wall foreign no-dist-gzip dist-xz])
 AC_CONFIG_SRCDIR([src/apply-default-acl.c])
 AC_CONFIG_FILES([Makefile src/Makefile])
 
@@ -21,6 +18,15 @@ AC_TYPE_MODE_T
 AC_CHECK_HEADERS([ fcntl.h ftw.h getopt.h libgen.h limits.h sys/acl.h ])
 AC_CHECK_HEADERS([ sys/libacl.h sys/types.h unistd.h ])
 
-LT_INIT
+# We need openat() with O_NOFOLLOW from POSIX-2008. Without them, we
+# can't operate securely; I would rather refuse to be built.
+AC_CHECK_FUNC(openat,
+              [],
+             AC_MSG_ERROR(missing required openat function))
+AC_CHECK_DECLS([O_NOFOLLOW],
+               [],
+              [AC_MSG_ERROR(missing required O_NOFOLLOW flag in fcntl.h)],
+              [[#include <fcntl.h>]])
 
+LT_INIT
 AC_OUTPUT