Gitiles
Code Review Sign In
gerrit.openbmc.org / openbmc / openbmc / 2daf84b2d486da0b21344da999553c8fa1228195 / . / meta-security / recipes-security / Firejail / firejail / exclude_seccomp_util_compiles.patch
blob: 7e706922753fa144f5ee3c56d468ee415f90105f [file] [log] [blame]
Andrew Geissler615f2f12022-07-15 14:00:58 -0500[diff] [blame]1Exclude all the seccomp files to run during build.
2
3Upstream-Status: Inappropriate [embedded specific]
4There are some files that need to run to generate the appropriate files
5we are currently doing this on the target.
6Signed-off-by: Armin Kuster <akuster808@gmail.com>
7
Andrew Geissler2daf84b2023-03-31 09:57:23 -0500[diff] [blame^]8Index: git/Makefile
Andrew Geissler615f2f12022-07-15 14:00:58 -0500[diff] [blame]9===================================================================
Andrew Geissler2daf84b2023-03-31 09:57:23 -0500[diff] [blame^]10--- git.orig/Makefile
11+++ git/Makefile
12@@ -18,7 +18,6 @@ MYDIRS = src/lib $(MAN_SRC) $(COMPLETION
Andrew Geissler615f2f12022-07-15 14:00:58 -0500[diff] [blame]13 MYLIBS = src/libpostexecseccomp/libpostexecseccomp.so src/libtrace/libtrace.so src/libtracelog/libtracelog.so
14 COMPLETIONS = src/zsh_completion/_firejail src/bash_completion/firejail.bash_completion
15 MANPAGES = firejail.1 firemon.1 firecfg.1 firejail-profile.5 firejail-login.5 firejail-users.5 jailcheck.1
16-SECCOMP_FILTERS = seccomp seccomp.debug seccomp.32 seccomp.block_secondary seccomp.mdwx seccomp.mdwx.32
17 ALL_ITEMS = $(APPS) $(SBOX_APPS) $(SBOX_APPS_NON_DUMPABLE) $(MYLIBS)
18
Andrew Geissler2daf84b2023-03-31 09:57:23 -0500[diff] [blame^]19 .PHONY: all
20@@ -43,7 +42,7 @@ $(MANPAGES): src/man config.mk
Andrew Geissler615f2f12022-07-15 14:00:58 -0500[diff] [blame]21
22 man: $(MANPAGES)
23
24-filters: $(SECCOMP_FILTERS) $(SBOX_APPS_NON_DUMPABLE)
Andrew Geissler2daf84b2023-03-31 09:57:23 -0500[diff] [blame^]25+filters: $(SBOX_APPS_NON_DUMPABLE)
Andrew Geissler615f2f12022-07-15 14:00:58 -0500[diff] [blame]26 seccomp: src/fseccomp/fseccomp src/fsec-optimize/fsec-optimize
27 src/fseccomp/fseccomp default seccomp
28 src/fsec-optimize/fsec-optimize seccomp
Andrew Geissler2daf84b2023-03-31 09:57:23 -0500[diff] [blame^]29@@ -72,7 +71,6 @@ clean:
Andrew Geissler615f2f12022-07-15 14:00:58 -0500[diff] [blame]30 done
31 $(MAKE) -C test clean
32 rm -f $(MANPAGES) $(MANPAGES:%=%.gz) firejail*.rpm
33- rm -f $(SECCOMP_FILTERS)
34 rm -f test/utils/index.html*
35 rm -f test/utils/wget-log
36 rm -f test/utils/firejail-test-file*
Andrew Geissler2daf84b2023-03-31 09:57:23 -0500[diff] [blame^]37@@ -110,7 +108,7 @@ endif
Andrew Geissler615f2f12022-07-15 14:00:58 -0500[diff] [blame]38 # libraries and plugins
39 install -m 0755 -d $(DESTDIR)$(libdir)/firejail
40 install -m 0755 -t $(DESTDIR)$(libdir)/firejail src/firecfg/firejail-welcome.sh
41- install -m 0644 -t $(DESTDIR)$(libdir)/firejail $(MYLIBS) $(SECCOMP_FILTERS)
Andrew Geissler2daf84b2023-03-31 09:57:23 -0500[diff] [blame^]42+ install -m 0644 -t $(DESTDIR)$(libdir)/firejail $(MYLIBS)
Andrew Geissler615f2f12022-07-15 14:00:58 -0500[diff] [blame]43 install -m 0755 -t $(DESTDIR)$(libdir)/firejail $(SBOX_APPS)
44 install -m 0755 -t $(DESTDIR)$(libdir)/firejail src/profstats/profstats
45 # plugins w/o read permission (non-dumpable)