[openwrt/openwrt] build: select procd-seccomp if kernel support is present
LEDE Commits
lede-commits at lists.infradead.org
Fri Oct 8 12:28:25 PDT 2021
aparcar pushed a commit to openwrt/openwrt.git, branch master:
https://git.openwrt.org/a7f794cd2aa104fdbd4c6e38f9b76373bf9b96e1
commit a7f794cd2aa104fdbd4c6e38f9b76373bf9b96e1
Author: Daniel Golle <daniel at makrotopia.org>
AuthorDate: Fri Nov 6 02:10:28 2020 +0000
build: select procd-seccomp if kernel support is present
Install ld-preload hooks allowing to add seccomp filters for arbitrary
services if kernel support for seccomp is present.
Signed-off-by: Daniel Golle <daniel at makrotopia.org>
---
include/target.mk | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/include/target.mk b/include/target.mk
index eac2d164c3..03192d3ebe 100644
--- a/include/target.mk
+++ b/include/target.mk
@@ -38,6 +38,11 @@ ifeq ($(CONFIG_SMALL_FLASH),)
DEFAULT_PACKAGES+=procd-ujail
endif
+# include seccomp ld-preload hooks if kernel supports it
+ifneq ($(CONFIG_KERNEL_SECCOMP),)
+DEFAULT_PACKAGES+=procd-seccomp
+endif
+
# For the basic set
DEFAULT_PACKAGES.basic:=
# For nas targets
More information about the lede-commits
mailing list