make: Move sandbox option into new Security group in configure.py.

1 files changed, 8 insertions, 4 deletions

diff --git a/make/configure.py b/make/configure.py
index 950aa793d..ffc38dedb 100644
--- a/make/configure.py
+++ b/make/configure.py
@@ -1361,11 +1361,13 @@ def createCLI( cross = None ):
     h = IfHost( 'AMD VCE video encoder', '*-*-mingw*', none=argparse.SUPPRESS).value
     grp.add_argument( '--enable-vce', dest="enable_vce", default=IfHost(True, '*-*-mingw*', none=False).value, action='store_true', help=(( 'enable %s' %h ) if h != argparse.SUPPRESS else h) )
     grp.add_argument( '--disable-vce', dest="enable_vce", action='store_false', help=(( 'disable %s' %h ) if h != argparse.SUPPRESS else h) )
-    h = IfHost( 'enable the App Sandbox capability (currently macOS-only)', '*-*-darwin*', none=argparse.SUPPRESS).value
-    grp.add_argument( '--enable-sandbox', dest="enable_sandbox", default=False, action='store_true', help=(( '%s' %h ) if h != argparse.SUPPRESS else h) )
-
 
+    cli.add_argument_group( grp )
 
+    ## add security options
+    grp = cli.add_argument_group( 'Security Options' )
+    h = IfHost( 'enable the Sandbox capability (currently macOS-only)', '*-*-darwin*', none=argparse.SUPPRESS).value
+    grp.add_argument( '--sandbox', dest="enable_sandbox", default=False, action='store_true', help=(( '%s' %h ) if h != argparse.SUPPRESS else h) )
     cli.add_argument_group( grp )
 
     ## add launch options
@@ -1968,7 +1970,9 @@ int main()
     doc.add( 'FEATURE.vce',        int( options.enable_vce ))
     doc.add( 'FEATURE.x265',       int( options.enable_x265 ))
     doc.add( 'FEATURE.numa',       int( options.enable_numa ))
-    doc.add( 'FEATURE.sandbox',    int( options.enable_sandbox ))
+
+    doc.addBlank()
+    doc.add( 'SECURITY.sandbox',    int( options.enable_sandbox ))
 
     if build_tuple.match( '*-*-darwin*' ) and options.cross is None:
         doc.add( 'FEATURE.xcode',      int( not (Tools.xcodebuild.fail or options.disable_xcode) ))