@eb Regarding https://boehs.org/node/everything-i-know-about-the-xz-backdoor
Jia Tan disabled the sandbox on Linux on 2024-02-26 with this commit: https://git.tukaani.org/?p=xz.git;a=blobdiff;f=CMakeLists.txt;h=d2b1af7ab0ab759b6805ced3dff2555e2a4b3f8e;hp=76700591059711e3a4da5b45cf58474dac4e12a7;hb=328c52da8a2bbb81307644efdb58db2c422d9ba7;hpb=eb8ad59e9bab32a8d655796afd39597ea6dcc64d
There is a dot present at the start of the first "empty" line making check_c_source_compiles always fail.