domenico/openwrt_NSS_ACW
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

build: select procd-seccomp if kernel support is present

Browse Source 
Install ld-preload hooks allowing to add seccomp filters for arbitrary
services if kernel support for seccomp is present.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This commit is contained in:
Daniel Golle
2020-11-06 02:10:28 +00:00
committed by Paul Spooren
parent 44f694ba1b
commit a7f794cd2a
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
include/target.mk
View File

@@ -38,6 +38,11 @@ ifeq ($(CONFIG_SMALL_FLASH),)
DEFAULT_PACKAGES+=procd-ujail DEFAULT_PACKAGES+=procd-ujail
endif endif
# include seccomp ld-preload hooks if kernel supports it
ifneq ($(CONFIG_KERNEL_SECCOMP),)
DEFAULT_PACKAGES+=procd-seccomp
endif
# For the basic set # For the basic set
DEFAULT_PACKAGES.basic:= DEFAULT_PACKAGES.basic:=
# For nas targets # For nas targets