Browse Source

build: select procd-seccomp if kernel support is present

Install ld-preload hooks allowing to add seccomp filters for arbitrary
services if kernel support for seccomp is present.

Signed-off-by: Daniel Golle <[email protected]>
Daniel Golle 5 years ago
parent
commit
a7f794cd2a
1 changed files with 5 additions and 0 deletions
  1. 5 0
      include/target.mk

+ 5 - 0
include/target.mk

@@ -38,6 +38,11 @@ ifeq ($(CONFIG_SMALL_FLASH),)
 DEFAULT_PACKAGES+=procd-ujail
 DEFAULT_PACKAGES+=procd-ujail
 endif
 endif
 
 
+# include seccomp ld-preload hooks if kernel supports it
+ifneq ($(CONFIG_KERNEL_SECCOMP),)
+DEFAULT_PACKAGES+=procd-seccomp
+endif
+
 # For the basic set
 # For the basic set
 DEFAULT_PACKAGES.basic:=
 DEFAULT_PACKAGES.basic:=
 # For nas targets
 # For nas targets